1. Home
  2. CVE Database
  3. CVE-2017-7496
HIGH · 7.0

CVE-2017-7496

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary direct...

Vulnerability Description

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

CVSS Score

7.0

HIGH

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
FedoraprojectArm Installer<= 1.99.16

Related Weaknesses (CWE)

CWE-755CWE-391

References

FAQ

What is CVE-2017-7496?

CVE-2017-7496 is a vulnerability with a CVSS score of 7.0 (HIGH). fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary direct...

How severe is CVE-2017-7496?

CVE-2017-7496 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-7496?

Check the references section above for vendor advisories and patch information. Affected products include: Fedoraproject Arm Installer.