CVE-2021-41617
Summary
| CVE | CVE-2021-41617 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-09-26 19:15:00 UTC |
| Updated | 2023-12-26 04:15:00 UTC |
| Description | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fedoraproject | Fedora | 33 | All | All | All |
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
| Operating System | Fedoraproject | Fedora | 35 | All | All | All |
| Application | Netapp | Active Iq Unified Manager | - | All | All | All |
| Hardware | Netapp | Aff 500f | - | All | All | All |
| Operating System | Netapp | Aff 500f Firmware | - | All | All | All |
| Hardware | Netapp | Aff A250 | - | All | All | All |
| Operating System | Netapp | Aff A250 Firmware | - | All | All | All |
| Application | Netapp | Clustered Data Ontap | - | All | All | All |
| Application | Netapp | Hci Management Node | - | All | All | All |
| Application | Netapp | Ontap Select Deploy Administration Utility | - | All | All | All |
| Application | Netapp | Solidfire | - | All | All | All |
| Application | Openbsd | Openssh | All | All | All | All |
| Application | Oracle | Http Server | 12.2.1.2.0 | All | All | All |
| Application | Oracle | Http Server | 12.2.1.3.0 | All | All | All |
| Application | Oracle | Http Server | 12.2.1.4.0 | All | All | All |
| Application | Oracle | Zfs Storage Appliance Kit | 8.8 | All | All | All |
| Application | Starwindsoftware | Starwind Virtual San | v8r13 | 14398 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| www.openssh.com/txt/release-8.8 | MISC | www.openssh.com | |
| oss-security - Announce: OpenSSH 8.8 released | MISC | www.openwall.com | |
| [SECURITY] Fedora 35 Update: openssh-8.7p1-2.fc35 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: openssh-8.6p1-5.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Oracle Critical Patch Update Advisory - April 2022 | MISC | www.oracle.com | |
| OpenSSH 6.2 < 8.8 | Tenable® | MISC | www.tenable.com | |
| OpenSSH: Security | MISC | www.openssh.com | |
| CVE-2021-41617 sshd issue in StarWind products | MISC | www.starwindsoftware.com | |
| [SECURITY] Fedora 35 Update: openssh-8.7p1-2.fc35 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Bug 1190975 – VUL-0: CVE-2021-41617: openssh-openssl1,openssh: privilege escalation when AuthorizedKeysCommand/AuthorizedPrincipalsCommand are configured | CONFIRM | bugzilla.suse.com | |
| CVE-2021-41617 OpenSSH Vulnerability in NetApp Products | NetApp Product Security | CONFIRM | security.netapp.com | |
| [SECURITY] Fedora 33 Update: openssh-8.4p1-8.fc33 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] [DLA 3694-1] openssh security update | lists.debian.org | ||
| [SECURITY] Fedora 34 Update: openssh-8.6p1-5.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| Debian -- Security Information -- DSA-5586-1 openssh | www.debian.org | ||
| [SECURITY] Fedora 33 Update: openssh-8.4p1-8.fc33 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Oracle Critical Patch Update Advisory - July 2022 | N/A | www.oracle.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159539 Oracle Enterprise Linux Security Update for openssh (ELSA-2021-4782)
- 159567 Oracle Enterprise Linux Security Update for openssh (ELSA-2021-9575)
- 159826 Oracle Enterprise Linux Security Update for openssh (ELSA-2022-2013)
- 182469 Debian Security Update for openssh (CVE-2021-41617)
- 200022 Ubuntu Security Notification for OpenSSH Vulnerabilities (USN-6565-1)
- 239905 Red Hat Update for openssh (RHSA-2021:4782)
- 240323 Red Hat Update for openssh security (RHSA-2022:2013)
- 257132 CentOS Security Update for openssh (CESA-2021:4782)
- 281952 Fedora Security Update for openssh (FEDORA-2021-1f7339271d)
- 281986 Fedora Security Update for openssh (FEDORA-2021-fa0e94198f)
- 296066 Oracle Solaris 11.4 Support Repository Update (SRU) 40.107.3 Missing (CPUOCT2021)
- 296067 Oracle Solaris 11.4 Support Repository Update (SRU) 33.94.0 Missing (CPUAPR2021)
- 330092 IBM Advanced Interactive eXecutive (AIX) OpenSSH Privilege Excalation Vulnerability (openssh_advisory14)
- 353162 Amazon Linux Security Advisory for openssh : ALAS2-2022-1748
- 353169 Amazon Linux Security Advisory for openssh : ALAS-2022-1565
- 377274 Alibaba Cloud Linux Security Update for openssh (ALINUX2-SA-2021:0066)
- 38868 OpenSSH Privilege Escalation Vulnerability
- 500490 Alpine Linux Security Update for openssh
- 501465 Alpine Linux Security Update for openssh
- 501761 Alpine Linux Security Update for openssh
- 501976 Alpine Linux Security Update for openssh
- 504249 Alpine Linux Security Update for openssh
- 591311 Bosch Rexroth PRA-ES8P2S Ethernet-Switch Multiple Vulnerabilities (BOSCH-SA-247053-BT)
- 591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)
- 6000398 Debian Security Update for openssh (DSA 5586-1)
- 6000403 Debian Security Update for openssh (DLA 3694-1)
- 671149 EulerOS Security Update for openssh (EulerOS-SA-2021-2809)
- 671172 EulerOS Security Update for openssh (EulerOS-SA-2021-2926)
- 671178 EulerOS Security Update for openssh (EulerOS-SA-2021-2918)
- 671294 EulerOS Security Update for openssh (EulerOS-SA-2022-1231)
- 671319 EulerOS Security Update for openssh (EulerOS-SA-2022-1212)
- 671348 EulerOS Security Update for openssh (EulerOS-SA-2022-1280)
- 690195 Free Berkeley Software Distribution (FreeBSD) Security Update for openssh (2a1b931f-2b86-11ec-8acd-c80aa9043978)
- 730409 McAfee Web Gateway Multiple Vulnerabilities (WP-4451,WP-4134,WP-4350,WP-4331,WP-4408,WP-4440,WP-4444,WP-4518,WP-4347,WP-4416)
- 751435 SUSE Enterprise Linux Security Update for openssh (SUSE-SU-2021:3875-1)
- 751443 SUSE Enterprise Linux Security Update for openssh (SUSE-SU-2021:3887-1)
- 751446 SUSE Enterprise Linux Security Update for openssh (SUSE-SU-2021:3951-1)
- 751452 SUSE Enterprise Linux Security Update for openssh (SUSE-SU-2021:3947-1)
- 751465 OpenSUSE Security Update for openssh (openSUSE-SU-2021:3950-1)
- 751856 SUSE Enterprise Linux Security Update for openssh (SUSE-SU-2022:0805-1)
- 900421 Common Base Linux Mariner (CBL-Mariner) Security Update for openssh (5936)
- 940541 AlmaLinux Security Update for openssh (ALSA-2022:2013)
- 960126 Rocky Linux Security Update for openssh (RLSA-2022:2013)