Vulnerability Name:

CVE-2021-31998 (CCN-204008)

Assigned:2021-06-10
Published:2021-06-10
Updated:2021-06-24
Summary:A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.
CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-276
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2021-31998

Source: CCN
Type: Bugzilla - Bug 1182321
(CVE-2021-31998) VUL-0: CVE-2021-31998: inn: %post calls user owned file, LPE to root

Source: CONFIRM
Type: Exploit, Issue Tracking, Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1182321

Source: CCN
Type: openSUSE Web site
Request 896351

Source: XF
Type: UNKNOWN
opensuse-cve202131998-priv-esc(204008)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:opensuse:inn:*:*:*:*:*:*:*:* (Version <= 2.4.2-170.21.3.1)
  • AND
  • cpe:/o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*

    • Configuration 2:
  • cpe:/a:opensuse:inn:*:*:*:*:*:*:*:* (Version < 2.6.2)
  • AND
  • cpe:/a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
  • OR cpe:/o:opensuse:leap:15.2:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:11237
    P
    		Security update for inn (Important)
    2021-07-08
    oval:org.opensuse.security:def:111535
    P
    		Security update for inn (Important)
    2021-07-08
    oval:org.opensuse.security:def:45791
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:38955
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:40261
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:43385
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:41361
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:44691
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:38149
    P
    		Security update for inn (Important)
    2021-06-17
    oval:org.opensuse.security:def:11227
    P
    		Security update for inn (Moderate)
    2021-06-07
    oval:org.opensuse.security:def:96492
    P
    		Security update for inn (Moderate)
    2021-06-07
    oval:org.opensuse.security:def:109839
    P
    		Security update for inn (Moderate)
    2021-06-07
    oval:org.opensuse.security:def:103182
    P
    		Security update for inn (Moderate)
    2021-06-07
    oval:org.opensuse.security:def:111416
    P
    		Security update for inn (Moderate)
    2021-06-03
    BACK
    opensuse inn *
    suse linux enterprise server 11 sp3
    opensuse inn *
    opensuse backports sle 15.0 sp2
    opensuse leap 15.2