CVE-2021-41617

HIGH

Published Sep 26, 20214y ago · Modified Jun 17, 20262w ago

7.0 CVSS 3.1

High

Published Sep 26, 2021 4y ago

Last Modified Jun 17, 2026 2w ago

Description

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

CVSS Details

Base Score

7.0

Exploitability

1.0

Impact

5.9

Vector string

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Local

Attack Complexity High

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

Patch Available

Affected Products 18

Vendor	Product	Version	Range
openbsd	openssh	*	≥6.2 – <8.8
fedoraproject	fedora	33	any
fedoraproject	fedora	34	any
fedoraproject	fedora	35	any
netapp	active_iq_unified_manager	*	any
netapp	clustered_data_ontap	*	any
netapp	hci_management_node	*	any
netapp	ontap_select_deploy_administration_utility	*	any
netapp	solidfire	*	any
netapp	aff_a250_firmware	*	any
netapp	aff_a250	*	any
netapp	aff_500f_firmware	*	any
netapp	aff_500f	*	any
oracle	http_server	12.2.1.2.0	any
oracle	http_server	12.2.1.3.0	any
oracle	http_server	12.2.1.4.0	any
oracle	zfs_storage_appliance_kit	8.8	any
starwindsoftware	starwind_virtual_san	v8r13	any

References 15

bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1190975

Issue TrackingPatchThird Party Advisory
cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-082556.html
lists.debian.org https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/
security.netapp.com https://security.netapp.com/advisory/ntap-20211014-0004/

Third Party Advisory
debian.org https://www.debian.org/security/2023/dsa-5586
openssh.com https://www.openssh.com/security.html

Vendor Advisory
openssh.com https://www.openssh.com/txt/release-8.8

Release NotesVendor Advisory
openwall.com https://www.openwall.com/lists/oss-security/2021/09/26/1

Mailing ListThird Party Advisory
oracle.com https://www.oracle.com/security-alerts/cpuapr2022.html

PatchThird Party Advisory
oracle.com https://www.oracle.com/security-alerts/cpujul2022.html

Third Party Advisory
starwindsoftware.com https://www.starwindsoftware.com/security/sw-20220805-0001/

Third Party Advisory
tenable.com https://www.tenable.com/plugins/nessus/154174

Remediation

bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1190975

Issue TrackingPatchThird Party Advisory
oracle.com https://www.oracle.com/security-alerts/cpuapr2022.html

PatchThird Party Advisory