CVE-2021-41617: sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as… | LiveThreat CVE Feed — Verisq

Login Request a demo

High severity · published Sep 26, 2021

CVE-2021-41617

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as…

7.0

CVSS

2.5%

EPSS

No

On KEV

Description

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.5% · higher than 85% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AI

Active IQ Unified Manager · Netapp

All versions, or not specified · source: NVD

A5

Aff 500f Firmware · Netapp

All versions, or not specified · source: NVD

AA

Aff A250 Firmware · Netapp

All versions, or not specified · source: NVD

CD

Clustered Data Ontap · Netapp

All versions, or not specified · source: NVD

FE

Fedora · Fedoraproject

33; 34; 35 · source: NVD

HM

Hci Management Node · Netapp

All versions, or not specified · source: NVD

HS

Http Server · Oracle

12.2.1.2.0; 12.2.1.3.0; 12.2.1.4.0 · source: NVD

OS

Ontap Select Deploy Administration Utility · Netapp

All versions, or not specified · source: NVD

OP

Openssh · Openbsd

6.2 before 8.8 · source: NVD

SO

Solidfire · Netapp

All versions, or not specified · source: NVD

SV

Starwind Virtual San · Starwindsoftware

v8r13 · source: NVD

ZS

Zfs Storage Appliance Kit · Oracle

8.8 · source: NVD

In the news

VulnerabilityHigh

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

View CSAF Summary Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP are affected: SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0) vers:intdot/>=3.1.6 (CVE-2021-41617, CVE-2023-28531, CVE-2023-51384, CVE-2023-52927, CVE-2024-26783, CVE-2024-27056, CVE-2024-28956, CVE-2024-36903, CVE-2024-36927, CVE-2024-42079, CVE-2024-46786, CVE-2024-47736, CVE-2024-47809, CVE-2024-49968, CVE-2024-49994, CVE-2024-49998, CVE-2024-50014, CVE-2024-50063, CVE-2024-50164, CVE-2024-50298, CVE-2024-53124, CVE-2024-53170, CVE-2024-54458, CVE-2024-56631, CVE-2024-56703, CVE-2024-56719, CVE-2024-57917, CVE-2024-57924, CVE-2024-57973, CVE-2024-57977, CVE-2024-57979, CVE-2024-58011, CVE-2024-58016, CVE-2024-58020, CVE-2024-58056, CVE-2024-58058, CVE-2024-58061, CVE-2024-58086, CVE-2025-21645, CVE-2025-21648, CVE-2025-21655, CVE-2025-21676, CVE-2025-21682, CVE-2025-21702, CVE-2025-21705, CVE-2025-21706, CVE-2025-21707, CVE-2025-21718, CVE-2025-21731, CVE-2025-21745, CVE-2025-21758, CVE-2025-21760, CVE-2025-21764, CVE-2025-21765, CVE-2025-21780, CVE-2025-21795, CVE-2025-21796, CVE-2025-21802, CVE-2025-21814, CVE-2025-21846, CVE-2025-21853, CVE-2...

CVE-2021-41617 CVE-2023-28531 CVE-2023-51384

Jul 28, 2026·CISA Advisories

Affected product

FE

Fedora

Fedoraproject

All Fedora CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2021-41617

https://www.cve.org/CVERecord?id=CVE-2021-41617

https://bugzilla.suse.com/show_bug.cgi?id=1190975

lists.debian.org

https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html

lists.fedoraproject.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/

lists.fedoraproject.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/

lists.fedoraproject.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/

Third Party Advisory

https://security.netapp.com/advisory/ntap-20211014-0004/

More from Fedora

10.0

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

10.0

ProFTPD Improper Access Control Vulnerability

9.8

Argument Injection in PHP-CGI

9.8

Roundcube Webmail SQL Injection Vulnerability

9.8

Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)