First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-36983

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2021/07/27/1Mailing List, Third Party Advisory
https://github.com/matanui159/ReplaySorcery/releasesRelease Notes, Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/07/27/1Mailing List, Third Party Advisory
https://github.com/matanui159/ReplaySorcery/releasesRelease Notes, Third Party Advisory

Timeline

Published: Jul 30, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-369857.5There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and CVE-2021-369869.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permis CVE-2021-369875.9There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploi CVE-2021-369887.5There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.CVE-2021-369899.8There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.CVE-2021-369909.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permis CVE-2021-369917.5There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vul CVE-2021-369927.5There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confi CVE-2021-369937.5There is a Memory leaks vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.CVE-2021-369943.7There is a issue that trustlist strings being repeatedly inserted into the linked list in Huawei Smartphone due to race conditions. Successf CVE-2021-369957.5There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft link CVE-2021-369965.3There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of