Vulnerability · Published Jun 10, 2021 · Assigned by suse

CVE-2021-31998inn: %post calls user owned file allowing local privilege escalation to root

Medium 6.8

In plain English

A medium-severity incorrect default permissions in openSUSE Backports SLE-15-SP2 from openSUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium

Exploit odds (30 days)0.3%top 75.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Ubuntu:22.04:LTS	inn2	no fix listed	UBUNTU-CVE-2021-31998
Ubuntu:24.04:LTS	inn2	no fix listed	UBUNTU-CVE-2021-31998
Ubuntu:25.10	inn2	no fix listed	UBUNTU-CVE-2021-31998
Ubuntu:26.04:LTS	inn2	no fix listed	UBUNTU-CVE-2021-31998
Ubuntu:26.10	inn2	no fix listed	UBUNTU-CVE-2021-31998

Affected products (as reported)

Vendor	Product	Versions
SUSE	SUSE Linux Enterprise Server 11-SP3	inn – through inn-2.4.2-170.21.3.1
openSUSE	openSUSE Backports SLE-15-SP2	inn – before 2.6.2
openSUSE	openSUSE Leap 15.2	inn – before 2.6.2

Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://bugzilla.suse.com/show_bug.cgi?id=1182321 x_refsource_CONFIRM