CVE-2021-31998

inn: %post calls user owned file allowing local privilege escalation to root

State: Published
Severity: 6.8 Medium
Published: Jun 10, 2021
Updated: Sep 16, 2024
Reserved: May 3, 2021

Description

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	suse

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
SUSE Linux Enterprise Server 11-SP3SUSE	inn through inn-2.4.2-170.21.3.1Affected
openSUSE Backports SLE-15-SP2openSUSE	inn to before 2.6.2Affected
openSUSE Leap 15.2openSUSE	inn to before 2.6.2Affected

References

https://bugzilla.suse.com/show_bug.cgi?id=1182321

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.