CVE-2017-7496

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-391 CWE-755

Affected software

Vendor	Product	Versions
Red Hat, Inc.	fedora-arm-installer	up to and including 1.99.16

References

https://pagure.io/arm-image-installer/pull-request/10Vendor Advisory
https://pagure.io/arm-image-installer/pull-request/10Vendor Advisory

Timeline

Published: Jun 26, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-74974.3The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker with the ability to CVE-2017-75007.8It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changin CVE-2017-75017.8It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with abilit CVE-2017-75027.5Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of serv CVE-2017-75039.8It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE. An attacker cou CVE-2017-75049.8HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Appli CVE-2017-75058.8Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assig CVE-2017-75068.8spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attac CVE-2017-75077.5GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid cont CVE-2017-75087.5OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.CVE-2017-75096.5An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.20-1. If the certreq CVE-2017-75108.8In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be revealed through the REST interface.