CVE-2021-35937 - AskarLabs CVE Database

CVE-2021-35937

Vendor N/A

Product RPM

Weakness CWE-59

Published August 25, 2022

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Key dates

02Disclosure timeline

August 25, 2022 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-35937 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/59.html

Related vulnerabilities

04Related CVE

CVE-2026-54369 acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions CVE-2023-36394 Windows Search Service Elevation of Privilege Vulnerability CVE-2025-34194 Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling CVE-2020-6015 CVE-2022-2898 Measuresoft ScadaPro Server and Client Link Following