CVE-2021-32000 clone-master-clean-up: dangerous file system operations
Local attackers can delete arbitrary files via symlink following in the clone-master-clean-up script on SUSE Linux systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2021-32000?
CVE-2021-32000 is a low-severity path traversal vulnerability in Suse Linux Enterprise Server, published on 28 Jul 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions.
Weakness: CWE-59
Which versions are affected by CVE-2021-32000?
It affects 2 products.
Linux distribution packages (7)
clone-master-clean-up SUSE:Linux Enterprise Module for Server Applications 15 SP3 | All versions | 1.8-150100.3.14.1 |
clone-master-clean-up SUSE:Linux Enterprise Module for Server Applications 15 SP4 | All versions | 1.8-150100.3.14.1 |
clone-master-clean-up SUSE:Linux Enterprise Server 12 SP5 | All versions | 1.8-4.11.1 |
clone-master-clean-up SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 1.8-4.11.1 |
clone-master-clean-up openSUSE:Leap 15.3 | All versions | 1.8-150100.3.14.1 |
clone-master-clean-up openSUSE:Leap 15.4 | All versions | 1.8-150100.3.14.1 |
clone-master-clean-up openSUSE:Tumbleweed | All versions | 1.11-1.1 |
Products include Suse Linux Enterprise Server, Suse Opensuse Factory.
How do I fix CVE-2021-32000?
Apply the vendor's patch.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2021-32000 being exploited?
There is no known exploitation of CVE-2021-32000 in the wild and no public exploit code.
Other vulnerabilities in Suse Linux Enterprise Server
Sources
Also known as GHSA-54r8-8cq2-5p82, SUSE-SU-2022:3667-1, SUSE-SU-2022:3674-1, openSUSE-SU-2024:12840-1.