Anolis OS update for openssh
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2021-41617 |
| CWE-ID | CWE-269 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
Anolis OS Operating systems & Components / Operating system pam_ssh_agent_auth Operating systems & Components / Operating system package or component openssh-server-sysvinit Operating systems & Components / Operating system package or component openssh-server Operating systems & Components / Operating system package or component openssh-ldap Operating systems & Components / Operating system package or component openssh-keycat Operating systems & Components / Operating system package or component openssh-clients Operating systems & Components / Operating system package or component openssh-cavs Operating systems & Components / Operating system package or component openssh-askpass Operating systems & Components / Operating system package or component openssh Operating systems & Components / Operating system package or component |
| Vendor | OpenAnolis |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Improper Privilege Management
EUVDB-ID: #VU58333
Risk: Low
CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2021-41617
CWE-ID:
CWE-269 - Improper Privilege Management
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges.
The vulnerability exists due to improper privilege management in sshd, when certain non-default configurations are used, because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and
AuthorizedPrincipalsCommand may run with privileges associated with
group memberships of the sshd process, if the configuration specifies
running the command as a different user. A local user can escalate privileges on the system.
Install updates from vendor's repository.
Vulnerable software versionsAnolis OS: 7
pam_ssh_agent_auth: before 0.10.3-2.22
openssh-server-sysvinit: before 7.4p1-22
openssh-server: before 7.4p1-22
openssh-ldap: before 7.4p1-22
openssh-keycat: before 7.4p1-22
openssh-clients: before 7.4p1-22
openssh-cavs: before 7.4p1-22
openssh-askpass: before 7.4p1-22
openssh: before 7.4p1-22
CPE2.3- cpe:2.3:o:openanolis:anolis_os:7:*:*:*:*:*:*:*
- cpe:2.3:a:openanolis:pam_ssh_agent_auth:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-server-sysvinit:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-server:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-ldap:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-keycat:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-clients:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-cavs:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh-askpass:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:a:openanolis:openssh:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2022:0817
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
