CVE-2017-7500

    Dashboard / Vulnerabilities / CVE-2017-7500

    CVE-2017-7500

    Published: 13 Aug 2018Last Modified: 8 Jul 2026

    Summary:

    Details: It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory in which a subdirectory will be installed, could redirect that directory to an arbitrary location and gain root privilege.

    References: https://github.com/rpm-software-management/rpm/commit/c815822c8bdb138066ff58c624ae83e3a12ebfa9, https://github.com/rpm-software-management/rpm/commit/f2d3be2a8741234faaa96f5fd05fdfdc75779a79, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7500

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -c14fa5e05801481d9b4bbc8bedc6a02527713f12

    Affected versions

    rpm-4.13.0.1-release
    rpm-4.13.0-release
    rpm-4.13.0-rc2
    rpm-4.13.0-rc1
    rpm-4.13.0-alpha

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High