阿里云漏洞库

漏洞描述

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://access.redhat.com/security/cve/CVE-2021-35939
https://bugzilla.redhat.com/show_bug.cgi?id=1964129
https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d...
https://github.com/rpm-software-management/rpm/pull/1919
https://rpm.org/wiki/Releases/4.18.0
https://security.gentoo.org/glsa/202210-22

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	rpm	rpm	*		Up to (excluding) 4.18
	运行在以下环境
	系统	alma_linux_8	rpm	*		Up to (excluding) 4.14.3-28.el8_9
	运行在以下环境
	系统	alma_linux_9	rpm	*		Up to (excluding) 4.16.1.3-27.el9_3
	运行在以下环境
	系统	alpine_3.17	rpm	*		Up to (excluding) 4.18.0-r0
	运行在以下环境
	系统	alpine_3.18	rpm	*		Up to (excluding) 4.18.0-r0
	运行在以下环境
	系统	alpine_3.19	rpm	*		Up to (excluding) 4.18.0-r0
	运行在以下环境
	系统	debian_12	rpm	*		Up to (excluding) 4.18.0+dfsg-1
	运行在以下环境
	系统	kylinos_aarch64_V10	rpm	*		Up to (excluding) 4.15.1-37.p01.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP1	rpm	*		Up to (excluding) 4.15.1-28.p01.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP2	rpm	*		Up to (excluding) 4.15.1-28.p01.ky10
	运行在以下环境
	系统	kylinos_loongarch64_V10SP3	rpm	*		Up to (excluding) 4.15.1-37.p01.a.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10	rpm	*		Up to (excluding) 4.15.1-37.p01.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP1	rpm	*		Up to (excluding) 4.15.1-28.p01.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP2	rpm	*		Up to (excluding) 4.15.1-28.p02.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP3	rpm	*		Up to (excluding) 4.15.1-37.p01.ky10
	运行在以下环境
	系统	oracle_9	rpm	*		Up to (excluding) 4.16.1.3-27.el9_3
	运行在以下环境
	系统	redhat_8	rpm	*		Up to (excluding) 4.14.3-28.el8_9
	运行在以下环境
	系统	redhat_9	rpm	*		Up to (excluding) 4.16.1.3-27.el9_3

攻击路径

本地
攻击复杂度

容易
权限要求

普通权限
影响范围

越权影响
EXP成熟度

N/A
补丁情况

没有补丁
数据保密性

无影响
数据完整性

无影响
服务器危害

服务器失陷
全网数量

N/A

CWE-ID	漏洞类型
CWE-59	在文件访问前对链接解析不恰当（链接跟随）

中危 rpm rpm 在文件访问前对链接解析不恰当（链接跟随）

漏洞描述

解决建议

参考链接

受影响软件情况