CVE-2021-35939: redhat enterprise_linux Link Following
Vulnerability summary
CVE-2021-35939 is a medium (CVSS 6.7) Link Following vulnerability in redhat enterprise_linux. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 41.7% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 7 · Related 1Timeline
- 26-08-2022PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
42%
Versus all other CVEs
30-day change
0.00 pp
From 0.51% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- rpm< 4.18.0+dfsg-1
Redhat1 product
Rpm1 product
- rpm< 4.18
Ubuntu1 product
- rpmAll versions (No fix recorded)
4 vendors · 4 products
References
10 links- github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556PatchThird Party Advisory
- access.redhat.com/security/cve/CVE-2021-35939Third Party Advisory
