Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2017-7501 |
CWE-ID | CWE-59 |
Exploitation vector | Local |
Public exploit | N/A |
Vulnerable software Subscribe |
rpm / |
Vendor | rpm-software-management |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU31396
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2017-7501
CWE-ID:
CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Exploit availability: No
DescriptionThe vulnerability allows a local authenticated user to execute arbitrary code.
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content, and possibly permissions to arbitrary files, which could be used for denial of service or possibly privilege escalation.
MitigationInstall update from vendor's website.
Vulnerable software versionsrpm: 4.13.0.1 - 4.13.0.2
External linkshttp://github.com/rpm-software-management/rpm/commit/404ef011c300207cdb1e531670384564aae04bdc
http://security.gentoo.org/glsa/201811-22
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.