The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-prioresetUpgrade rpm-cronUpgrade rpm-libsUpgrade rpm-develUpgrade rpm-signUpgrade python3-rpmUpgrade rpm-plugin-auditUpgrade rpm-buildUpgrade rpm-plugin-selinuxUpgrade rpm-apidocsUpgrade rpm-sign-libsUpgrade rpmUpgrade rpm-build-libsUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima | Jan 29, 2024 | Aug 26, 2022 |
| Alpine Linux | — | Upgrade rpm | Aug 22, 2024 | Aug 26, 2022 |
| Amazon_linux_2023 | — | Upgrade rpm-develUpgrade rpm-signUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-sign-libsUpgrade rpm-debugsourceUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinuxUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-selinux-debuginfoUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-plugin-auditUpgrade rpm-apidocsUpgrade rpm-build-libsUpgrade rpm-plugin-fapolicydUpgrade rpm-sign-libs-debuginfoUpgrade rpmUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-build-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-imaUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-buildUpgrade python3-rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-libsUpgrade rpm-cronUpgrade rpm-debuginfoUpgrade rpm-devel-debuginfo | Feb 17, 2025 | Jun 30, 2021 |
| Centos_linux | — | Upgrade rpm-apidocsUpgrade rpm-plugin-fapolicydUpgrade rpm-debugsourceUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-plugin-auditUpgrade rpm-libs-debuginfoUpgrade rpm-cronUpgrade rpm-sign-libs-debuginfoUpgrade rpm-sign-libsUpgrade rpm-build-debuginfoUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-selinuxUpgrade rpm-libsUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-plugin-systemd-inhibitUpgrade python3-rpm-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-build-libsUpgrade rpm-buildUpgrade rpm-plugin-syslog-debuginfoUpgrade rpm-debuginfoUpgrade python3-rpmUpgrade rpm-signUpgrade rpm-plugin-imaUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpmUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-devel | Jan 26, 2024 | Aug 26, 2022 |
| Debian | — | Upgrade rpm | Jul 30, 2024 | Aug 26, 2022 |
| Freebsd | — | Upgrade rpm4 | Dec 2, 2022 | Dec 1, 2022 |
| Gentoo Linux | — | Upgrade app-arch/rpm. | Oct 31, 2022 | Aug 26, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rpmUpgrade python3-rpmUpgrade rpm-libsUpgrade rpm-plugin-systemd-inhibit | Dec 22, 2022 | Aug 26, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-rpmUpgrade rpm-plugin-systemd-inhibitUpgrade rpmUpgrade rpm-libs | Nov 15, 2022 | Aug 26, 2022 |
| Oracle_linux | — | Upgrade rpm-develUpgrade rpm-plugin-auditUpgrade rpm-sign-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-prioresetUpgrade rpm-cronUpgrade rpm-build-libsUpgrade rpm-signUpgrade rpm-libsUpgrade rpm-plugin-fapolicydUpgrade rpm-plugin-selinuxUpgrade python3-rpmUpgrade rpm-buildUpgrade rpmUpgrade rpm-plugin-syslogUpgrade rpm-apidocsUpgrade rpm-plugin-ima | Jan 25, 2024 | Jun 30, 2021 |
| Redhat Openshift | — | Upgrade windows-machine-config-rhel9-operator | Aug 10, 2026 | Jun 30, 2021 |
| Redhat_linux | — | Upgrade rpm-sign-libsUpgrade python3-rpm-debuginfoUpgrade rpm-libs-debuginfoUpgrade rpm-plugin-prioresetUpgrade rpm-plugin-selinux-debuginfoUpgrade rpm-libsUpgrade rpm-plugin-fapolicyd-debuginfoUpgrade rpm-apidocsUpgrade rpm-plugin-selinuxUpgrade rpm-build-libs-debuginfoUpgrade rpm-plugin-imaUpgrade rpm-sign-libs-debuginfoUpgrade rpm-sign-debuginfoUpgrade rpm-plugin-audit-debuginfoUpgrade rpm-debugsourceUpgrade rpm-build-debuginfoUpgrade rpm-debuginfoUpgrade rpm-build-libsUpgrade rpm-plugin-systemd-inhibitUpgrade rpm-plugin-systemd-inhibit-debuginfoUpgrade rpm-devel-debuginfoUpgrade rpm-plugin-auditUpgrade rpm-plugin-fapolicydNo solution existsUpgrade python3-rpmUpgrade rpm-plugin-prioreset-debuginfoUpgrade rpm-plugin-syslogUpgrade rpm-plugin-ima-debuginfoUpgrade rpm-signUpgrade rpm-plugin-syslog-debuginfoUpgrade rpmUpgrade rpm-cronUpgrade rpm-buildUpgrade rpm-devel | Jan 26, 2024 | Aug 26, 2022 |
| Rocky_linux | — | — | Aug 15, 2024 | Aug 26, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub