CVE-2021-25321: arpwatch: Local privilege escalation from runtime user to root
SUSE · SUSE Linux Enterprise Server 11-SP4-LTSS
Vendor fix available · Affected: SUSE Linux Enterprise Server 11-SP4-LTSS · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 38% of scored CVEs
DescriptionCVE.org
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
Affected products5
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- SUSE · SUSE Linux Enterprise Server 11-SP4-LTSSfrom arpwatch before 2.1a15
- SUSE · SUSE Manager Server 4.0from arpwatch before 2.1a15
- SUSE · SUSE OpenStack Cloud Crowbar 9from arpwatch before 2.1a15
- openSUSE · Factoryfrom arpwatch up to and including 2.1a15-169.5
- openSUSE · Leap 15.2from arpwatch up to and including 2.1a15-lp152.5.5
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2021-25321 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.