CVE-2021-36983

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Jul 30, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-369857.5There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and CVE-2021-369869.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisCVE-2021-369875.9There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploiCVE-2021-369887.5There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.CVE-2021-369899.8There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.CVE-2021-369909.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permisCVE-2021-369917.5There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulCVE-2021-369927.5There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confiCVE-2021-369937.5There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.CVE-2021-369943.7There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. SuccessfCVE-2021-369957.5There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft linkCVE-2021-369965.3There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of
CVE-2021-36983: High severity, CVSS 7.8 | Vulnix