fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of…

Published 9 y ago 2017-06-26 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.0

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.3%

percentile 18%

Public exploits

none known

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

Exploit prediction (EPSS)

0.26% probability of exploitation in the next 30 days, higher than 18% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	7.0	`CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	4.4	`AV:L/AC:M/Au:N/C:P/I:P/A:P`

Affected products

Red Hat, Inc. fedora-arm-installer

Classification

Weakness

CWE-391 DEPRECATED: Unchecked Error Condition
CWE-755 Improper Handling of Exceptional Conditions

References

pagure.io /arm-image-installer/pull-request/10 · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2017-7496
NVD: CVE-2017-7496

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.