CVE-2017-7496

HIGH

Fedora-arm-installer <1.99.16 - Privilege Escalation

Title source: llm

Description

fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of mount operation failure on unsafely created temporary directories.

References (1)

[Vendor Advisory] https://pagure.io/arm-image-installer/pull-request/10

Scores

CVSS v3 7.0

EPSS 0.0005

EPSS Percentile 15.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-755 CWE-391

Status draft

Affected Products (1)

fedoraproject/arm_installer < 1.99.16

Timeline

Published Jun 26, 2017

Tracked Since Feb 18, 2026