When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.
References
Configurations
No configuration.
History
29 Jan 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-29 10:15
Updated : 2025-01-29 10:15
NVD link : CVE-2021-3978
Mitre link : CVE-2021-3978
CVE.ORG link : CVE-2021-3978
JSON object : View
Products Affected
No product.
CWE
CWE-269
Improper Privilege Management