Gentoo update for squashfs-tools
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2021-40153 CVE-2021-41072 |
| CWE-ID | CWE-22 CWE-59 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Gentoo Linux Operating systems & Components / Operating system |
| Vendor | Gentoo |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Path traversal
EUVDB-ID: #VU56306
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-40153
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote user to compromise the affected system.
The vulnerability exists due to input validation error when processing directory traversal sequences within the squashfs_opendir in unsquash-1.c. A remote user can store the filename in the directory entry, which later is used by unsquashfs to create the new file during the unsquash. As a result, it is possible to write files to locations outside of the destination.
MitigationUpdate the affected packages.
sys-fs/squashfs-tools to version:
Gentoo Linux: All versions
Fixed software versionsCPE2.3 External links
http://security.gentoo.org/glsa/202305-29
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
2) Link following
EUVDB-ID: #VU57416
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2021-41072
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote attacker to overwrite arbitrary files on the system.
The vulnerability exists due to a link following issue in squashfs_opendir in unsquash-2.c when processing a squashfs filesystem that has been crafted to include a symbolic link under the same filename in a filesystem. The attacker can cause unsquashfs to first create the symbolic link pointing outside the expected directory, and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem.
MitigationUpdate the affected packages.
sys-fs/squashfs-tools to version:
Gentoo Linux: All versions
Fixed software versionsCPE2.3 External links
http://security.gentoo.org/glsa/202305-29
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
