{ "document": { "aggregate_severity": { "text": "High" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos7els/vex/2021/cve-2021-41133-els_os-centos7els.json" } ], "title": "Security update on CVE-2021-41133", "tracking": { "current_release_date": "2025-12-23T20:55:41Z", "generator": { "date": "2025-12-23T20:55:41Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2021-41133-ELS_OS-CENTOS7ELS", "initial_release_date": "2021-10-08T14:15:00Z", "revision_history": [ { "date": "2021-10-08T14:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2025-10-16T19:30:38Z", "number": "2", "summary": "Official Publication" }, { "date": "2025-11-29T10:53:45Z", "number": "3", "summary": "Update document" }, { "date": "2025-12-23T20:55:41Z", "number": "4", "summary": "Update document" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 7", "product": { "name": "Community Enterprise Operating System 7", "product_id": "CentOS-7", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product": { "name": "flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_id": "flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/flatpak@1.0.9-13.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "product": { "name": "flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "product_id": "flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/flatpak-builder@1.0.0-13.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product": { "name": "flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_id": "flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/flatpak-devel@1.0.9-13.el7_9.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product": { "name": "flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_id": "flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/flatpak-libs@1.0.9-13.el7_9.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "TuxCare" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "flatpak-1.0.9-13.el7_9.x86_64", "product": { "name": "flatpak-1.0.9-13.el7_9.x86_64", "product_id": "flatpak-1.0.9-13.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/flatpak@1.0.9-13.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-builder-1.0.0-13.el7_9.x86_64", "product": { "name": "flatpak-builder-1.0.0-13.el7_9.x86_64", "product_id": "flatpak-builder-1.0.0-13.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/flatpak-builder@1.0.0-13.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-devel-1.0.9-13.el7_9.x86_64", "product": { "name": "flatpak-devel-1.0.9-13.el7_9.x86_64", "product_id": "flatpak-devel-1.0.9-13.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/flatpak-devel@1.0.9-13.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "flatpak-libs-1.0.9-13.el7_9.x86_64", "product": { "name": "flatpak-libs-1.0.9-13.el7_9.x86_64", "product_id": "flatpak-libs-1.0.9-13.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/flatpak-libs@1.0.9-13.el7_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat, Inc." } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64" }, "product_reference": "flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64" }, "product_reference": "flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64" }, "product_reference": "flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64" }, "product_reference": "flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-1.0.9-13.el7_9.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-1.0.9-13.el7_9.x86_64" }, "product_reference": "flatpak-1.0.9-13.el7_9.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-builder-1.0.0-13.el7_9.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-builder-1.0.0-13.el7_9.x86_64" }, "product_reference": "flatpak-builder-1.0.0-13.el7_9.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-devel-1.0.9-13.el7_9.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-devel-1.0.9-13.el7_9.x86_64" }, "product_reference": "flatpak-devel-1.0.9-13.el7_9.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "flatpak-libs-1.0.9-13.el7_9.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:flatpak-libs-1.0.9-13.el7_9.x86_64" }, "product_reference": "flatpak-libs-1.0.9-13.el7_9.x86_64", "relates_to_product_reference": "CentOS-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2021-41133", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct access to AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can trick portals and other host-OS services into treating the Flatpak app as though it was an ordinary, non-sandboxed host-OS process. They can do this by manipulating the VFS using recent mount-related syscalls that are not blocked by Flatpak's denylist seccomp filter, in order to substitute a crafted `/.flatpak-info` or make that file disappear entirely. Flatpak apps that act as clients for AF_UNIX sockets such as those used by Wayland, Pipewire or pipewire-pulse can escalate the privileges that the corresponding services will believe the Flatpak app has. Note that protocols that operate entirely over the D-Bus session bus (user bus), system bus or accessibility bus are not affected by this. This is due to the use of a proxy process `xdg-dbus-proxy`, whose VFS cannot be manipulated by the Flatpak app, when interacting with these buses. Patches exist for versions 1.10.4 and 1.12.0, and as of time of publication, a patch for version 1.8.2 is being planned. There are no workarounds aside from upgrading to a patched version.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-7:flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64" ], "known_affected": [ "CentOS-7:flatpak-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-builder-1.0.0-13.el7_9.x86_64", "CentOS-7:flatpak-devel-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-libs-1.0.9-13.el7_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-41133" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2021/10/26/9", "url": "http://www.openwall.com/lists/oss-security/2021/10/26/9" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/1330662f33a55e88bfe18e76de28b7922d91a999", "url": "https://github.com/flatpak/flatpak/commit/1330662f33a55e88bfe18e76de28b7922d91a999" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/26b12484eb8a6219b9e7aa287b298a894b2f34ca", "url": "https://github.com/flatpak/flatpak/commit/26b12484eb8a6219b9e7aa287b298a894b2f34ca" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/462fca2c666e0cd2b60d6d2593a7216a83047aaf", "url": "https://github.com/flatpak/flatpak/commit/462fca2c666e0cd2b60d6d2593a7216a83047aaf" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/4c34815784e9ffda5733225c7d95824f96375e36", "url": "https://github.com/flatpak/flatpak/commit/4c34815784e9ffda5733225c7d95824f96375e36" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/89ae9fe74c6d445bb1b3a40e568d77cf5de47e48", "url": "https://github.com/flatpak/flatpak/commit/89ae9fe74c6d445bb1b3a40e568d77cf5de47e48" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/9766ee05b1425db397d2cf23afd24c7f6146a69f", "url": "https://github.com/flatpak/flatpak/commit/9766ee05b1425db397d2cf23afd24c7f6146a69f" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/a10f52a7565c549612c92b8e736a6698a53db330", "url": "https://github.com/flatpak/flatpak/commit/a10f52a7565c549612c92b8e736a6698a53db330" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/commit/e26ac7586c392b5eb35ff4609fe232c52523b2cf", "url": "https://github.com/flatpak/flatpak/commit/e26ac7586c392b5eb35ff4609fe232c52523b2cf" }, { "category": "external", "summary": "https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q", "url": "https://github.com/flatpak/flatpak/security/advisories/GHSA-67h7-w3jq-vh4q" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5656ONDP2MGKIJMKEC7N2NXCV27WGTC/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5656ONDP2MGKIJMKEC7N2NXCV27WGTC/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5DKCYRC6MFSTFCUP4DELCOUUP3SFEFX/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5DKCYRC6MFSTFCUP4DELCOUUP3SFEFX/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202312-12", "url": "https://security.gentoo.org/glsa/202312-12" }, { "category": "external", "summary": "https://www.debian.org/security/2021/dsa-4984", "url": "https://www.debian.org/security/2021/dsa-4984" } ], "release_date": "2021-10-08T14:15:00Z", "remediations": [ { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:flatpak-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-builder-1.0.0-13.el7_9.x86_64", "CentOS-7:flatpak-devel-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-libs-1.0.9-13.el7_9.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-7:flatpak-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-builder-0:1.0.0-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-builder-1.0.0-13.el7_9.x86_64", "CentOS-7:flatpak-devel-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-devel-1.0.9-13.el7_9.x86_64", "CentOS-7:flatpak-libs-0:1.0.9-13.el7_9.tuxcare.els1.x86_64", "CentOS-7:flatpak-libs-1.0.9-13.el7_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }