VULNERABILITY INTELLIGENCE
CVE-2017-7496
CVSS score7 HIGH
EPSS probability0.26%
CISA KEVNot currently listed
Published2017-06-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.
Weakness classification
- CWE-391: Unchecked Error Condition
- CWE-755: Improper Handling of Exceptional Conditions
Primary references
- secalert@redhat.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory