Log in Start free

Vulnerability · Published Sep 14, 2021 · Assigned by mitre

CVE-2021-41072

High 8.1

In plain English

A high-severity security flaw in the squashfs-tools package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)8.1High
Exploit odds (30 days)2.3%top 16.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that has been crafted to include a symbolic link and then contents under the same filename in a filesystem can cause unsquashfs to first create the symbolic link pointing outside the expected directory, and then the subsequent write operation will cause the unsquashfs process to write through the symbolic link elsewhere in the filesystem.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8squashfs-tools4.3-21.el8ALSA-2024:3139
AlmaLinux:9squashfs-tools4.4-10.git1.el9ALSA-2024:2396
Alpine:v3.20squashfs-tools4.5-r1ALPINE-CVE-2021-41072
Alpine:v3.21squashfs-tools4.5-r1ALPINE-CVE-2021-41072
Alpine:v3.22squashfs-tools4.5-r1ALPINE-CVE-2021-41072
Alpine:v3.23squashfs-tools4.5-r1ALPINE-CVE-2021-41072
Alpine:v3.24squashfs-tools4.5-r1ALPINE-CVE-2021-41072
Debian:12squashfs-tools1:4.5-3DEBIAN-CVE-2021-41072
Debian:13squashfs-tools1:4.5-3DEBIAN-CVE-2021-41072
Debian:14squashfs-tools1:4.5-3DEBIAN-CVE-2021-41072
Rocky Linux:8squashfs-tools0:4.3-21.el8RLSA-2024:3139
Rocky Linux:9squashfs-tools0:4.4-10.git1.el9RLSA-2024:2396
Ubuntu:22.04:LTSsquashfs-tools1:4.4-2ubuntu2UBUNTU-CVE-2021-41072

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References