debian/arpwatch vulnerabilities

Latest debian/arpwatch CVEs

Newest publication first

1. CVE-2021-25321 arpwatch: Local privilege escalation from runtime user to root

   Published 2021-06-30

   High·CVSS 7.8 EPSS 0.44%

   A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escal...

2. CVE-2012-2653 arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabi...

   Published 2012-07-12

   High·CVSS 10.0 EPSS 3.2%

   arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.

3. DSA-2481-1 arpwatch - fails to drop supplementary groups

   Published 2012-05-27

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.