CVE-2021-25317 cups: ownership of /var/log/cups allows the lp user to create files as root
LowCVSS 3.3
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server 11-SP4-LTSS | >= cups, < 1.3.9 | 1.3.9 |
| SUSE Manager Server 4.0 | >= cups, < 2.2.7 | 2.2.7 |
| SUSE OpenStack Cloud Crowbar 9 | >= cups, < 1.7.5 | 1.7.5 |
| openSUSE Leap 15.2 | >= cups, < 2.2.7 | 2.2.7 |
| openSUSE Factory | >= cups, <= 2.3.3op2-2.1 | No fix listed |
| SUSE cups | < 1.3.9 | 1.3.9 |
| SUSE cups | < 2.2.7 | 2.2.7 |
| SUSE cups | < 1.7.5 | 1.7.5 |
| SUSE cups | <= 2.3.3op2-2.1 | No fix listed |
| fedoraproject fedora | = 32 | No fix listed |
| fedoraproject fedora | = 33 | No fix listed |
| fedoraproject fedora | = 34 | No fix listed |
References
- bugzilla.suse.com issue-tracking vendor-advisory
- FEDORA-2021-dc578ce534 vendor-advisory
- FEDORA-2021-7b698513d5 vendor-advisory
- FEDORA-2021-be95e017e7 vendor-advisory
- Debian Security Tracker CVE-2021-25317 vendor-advisory