CVE-2021-35939

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-59
• CWE-59

• https://access.redhat.com/security/cve/CVE-2021-35939Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1964129Exploit, Issue Tracking, Third Party Advisory
• https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556Patch, Third Party Advisory
• https://github.com/rpm-software-management/rpm/pull/1919Patch, Third Party Advisory
• https://rpm.org/wiki/Releases/4.18.0Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/202210-22Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2021-35939Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1964129Exploit, Issue Tracking, Third Party Advisory
• https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556Patch, Third Party Advisory
• https://github.com/rpm-software-management/rpm/pull/1919Patch, Third Party Advisory
• https://rpm.org/wiki/Releases/4.18.0Release Notes, Vendor Advisory
• https://security.gentoo.org/glsa/202210-22Third Party Advisory

Published

Aug 26, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3591Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-3592An invalid pointer initialization issue was found in the SLi…3.8
• CVE-2021-3593An invalid pointer initialization issue was found in the SLi…3.8
• CVE-2021-35936If remote logging is not used, the worker (in the case of Ce…5.3
• CVE-2021-35937A race condition vulnerability was found in rpm. A local unp…6.4
• CVE-2021-35938A symbolic link issue was found in rpm. It occurs when rpm s…6.7
• CVE-2021-3594An invalid pointer initialization issue was found in the SLi…3.8
• CVE-2021-35940An out-of-bounds array read in the apr_time_exp*() functions…7.1
• CVE-2021-35941Western Digital WD My Book Live (2.x and later) and WD My Bo…7.5
• CVE-2021-35942The wordexp function in the GNU C Library (aka glibc) throug…9.1
• CVE-2021-35943Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect…9.8
• CVE-2021-35944Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a…7.5