CVE-2021-27851

Katalog CVE

CVSS 5.5 · Medium EPSS 0,33%

Kerentanan Permissions, Privileges, and Access Controls pada gnu guix. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs locally. The attack consists in having an unprivileged user spawn a build process, for instance with `guix build`, that makes its build directory world-writable. The user then creates a hardlink to a root-owned file such as /etc/shadow in that build directory. If the user passed the --keep-failed option and the build eventually fails, the daemon changes ownership of the whole build tree, including the hardlink, to the user. At that point, the user has write access to the target file. Versions after and including v0.11.0-3298-g2608e40988, and versions prior to v1.2.0-75109-g94f0312546 are vulnerable.

Rincian

Terbit di NVD

26 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-264: Permissions, Privileges, and Access Controls
CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.gnu.org/47229 issue tracking · mailing list · patch · advisory vendor
• https://guix.gnu.org/en/blog/2021/risk-of-local-privilege-escalation-via-guix-daemon/ patch · advisory vendor