Log in Start free

Vulnerability · Published Aug 27, 2021 · Assigned by mitre

CVE-2021-40153

High 8.1

In plain English

A high-severity security flaw in the squashfs-tools package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.1High
Exploit odds (30 days)2.5%top 15.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8squashfs-tools4.3-21.el8ALSA-2024:3139
AlmaLinux:9squashfs-tools4.4-10.git1.el9ALSA-2024:2396
Alpine:v3.20squashfs-tools4.5-r0ALPINE-CVE-2021-40153
Alpine:v3.21squashfs-tools4.5-r0ALPINE-CVE-2021-40153
Alpine:v3.22squashfs-tools4.5-r0ALPINE-CVE-2021-40153
Alpine:v3.23squashfs-tools4.5-r0ALPINE-CVE-2021-40153
Alpine:v3.24squashfs-tools4.5-r0ALPINE-CVE-2021-40153
Debian:12squashfs-tools1:4.5-2DEBIAN-CVE-2021-40153
Debian:13squashfs-tools1:4.5-2DEBIAN-CVE-2021-40153
Debian:14squashfs-tools1:4.5-2DEBIAN-CVE-2021-40153
Rocky Linux:8squashfs-tools0:4.3-21.el8RLSA-2024:3139
Rocky Linux:9squashfs-tools0:4.4-10.git1.el9RLSA-2024:2396

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References