CVE-2021-41617

HIGH

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

CVSS v3.1 Score

7.0
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Complexity
HIGH
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 9/26/2021Modified: 7/14/2026

Related Intelligence (1)

CRITICALAi

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-209-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommend

CVE-2021-41617CVE-2023-28531
CISA Advisories

References (30)

https://bugzilla.suse.com/show_bug.cgi?id=1190975Issue TrackingPatchhttps://lists.debian.org/debian-lts-announce/2023/12/msg00017.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/https://security.netapp.com/advisory/ntap-20211014-0004/Third Party Advisoryhttps://www.debian.org/security/2023/dsa-5586https://www.openssh.com/security.htmlVendor Advisoryhttps://www.openssh.com/txt/release-8.8Release NotesVendor Advisoryhttps://www.openwall.com/lists/oss-security/2021/09/26/1Mailing ListThird Party Advisoryhttps://www.oracle.com/security-alerts/cpuapr2022.htmlPatchThird Party Advisoryhttps://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisoryhttps://www.starwindsoftware.com/security/sw-20220805-0001/Third Party Advisoryhttps://www.tenable.com/plugins/nessus/154174https://bugzilla.suse.com/show_bug.cgi?id=1190975Issue TrackingPatchhttps://lists.debian.org/debian-lts-announce/2023/12/msg00017.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XJIONMHMKZDTMH6BQR5TNLF2WDCGWED/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVI7RWM2JLNMWTOFK6BDUSGNOIPZYPUT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W44V2PFQH5YLRN6ZJTVRKAD7CU6CYYET/https://security.netapp.com/advisory/ntap-20211014-0004/Third Party Advisoryhttps://www.debian.org/security/2023/dsa-5586https://www.openssh.com/security.htmlVendor Advisoryhttps://www.openssh.com/txt/release-8.8Release NotesVendor Advisoryhttps://www.openwall.com/lists/oss-security/2021/09/26/1Mailing ListThird Party Advisoryhttps://www.oracle.com/security-alerts/cpuapr2022.htmlPatchThird Party Advisoryhttps://www.oracle.com/security-alerts/cpujul2022.htmlThird Party Advisoryhttps://www.starwindsoftware.com/security/sw-20220805-0001/Third Party Advisoryhttps://www.tenable.com/plugins/nessus/154174https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html