Home > Vulnerability Database > CVE-2021-40153

Mend.io Vulnerability Database

CVE-2021-40153

Date: August 26, 2021

squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination.

Language: C

Severity Score

8.1

Related Resources (16)

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GSMRKVJMJFX3MB7D3PXJSYY3TLZROE5S/

Url: https://nvd.nist.gov/vuln/detail/CVE-2021-40153

Url: https://lists.debian.org/debian-lts-announce/2021/08/msg00030.html

Url: https://access.redhat.com/security/cve/CVE-2021-40153

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAOZ4BKWAC4Y3U2K5MMW3S77HWWXHQDL/

Url: https://github.com/plougher/squashfs-tools/commit/79b5a555058eef4e1e7ff220c344d39f8cd09646

Url: https://bugs.launchpad.net/ubuntu/+source/squashfs-tools/+bug/1941790

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RAOZ4BKWAC4Y3U2K5MMW3S77HWWXHQDL/

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2021-40153

Url: https://security.gentoo.org/glsa/202305-29

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSMRKVJMJFX3MB7D3PXJSYY3TLZROE5S/

Url: https://security-tracker.debian.org/tracker/CVE-2021-40153

Url: https://security.alpinelinux.org/vuln/CVE-2021-40153

Url: https://github.com/plougher/squashfs-tools/issues/72

Url: https://www.debian.org/security/2021/dsa-4967

Url: https://www.mend.io/vulnerability-database/CVE-2021-40153

Severity Score

8.1

Weakness Type (CWE)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-22

CVSS v3.1

Base Score:	8.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	5.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2021-40153

Date: August 26, 2021

Language: C

Severity Score

Related Resources (16)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?