CVE-2021-44038 : An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (w

An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.

Published 2021-11-19 19:15:09

Updated 2022-07-12 17:42:04

Source MITRE

View at NVD, CVE.org

Threat overview for CVE-2021-44038

Top countries where our scanners detected CVE-2021-44038

Top open port discovered on systems with this issue 2601

IPs affected by CVE-2021-44038 37,626

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2021-44038!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2021-44038

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-44038

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-44038

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-44038

https://bugzilla.suse.com/show_bug.cgi?id=1191890

Bug 1191890 – VUL-1: quagga: Local privilege escalation from quagga to root
Exploit;Issue Tracking;Third Party Advisory
https://github.com/Quagga/quagga/releases

Releases · Quagga/quagga · GitHub
Release Notes;Third Party Advisory

Products affected by CVE-2021-44038