Low severity · published May 5, 2021
CVE-2021-25317
cups: ownership of /var/log/cups allows the lp user to create files as root
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 19% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
Factory · openSUSE
cups through 2.3.3op2-2.1 · source: vendor
SL
SUSE Linux Enterprise Server 11-SP4-LTSS · SUSE
cups before 1.3.9 · source: vendor
SM
SUSE Manager Server 4.0 · SUSE
cups before 2.2.7 · source: vendor
SO
SUSE OpenStack Cloud Crowbar 9 · SUSE
cups before 1.7.5 · source: vendor
OL
openSUSE Leap 15.2 · openSUSE
cups before 2.2.7 · source: vendor
CU
Cups · Suse
before 1.3.9; before 2.2.7; before 1.7.5; before 2.2.7; through 2.3.3op2-2.1 · source: NVD
FE
Fedora · Fedoraproject
32; 33; 34 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-25317
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-25317
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1184161
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/
lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/
More from Factory
7.8
CVE-2022-31256
sendmail: mail to root privilege escalation via sm-client.pre script
7.8
CVE-2021-45082
An issue was discovered in Cobbler before 3.3.1
7.8
CVE-2021-25319
A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root
7.5
CVE-2021-41819
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names
7.5
CVE-2021-41817
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string