CVE catalog
CVE-2021-25321
arpwatch: CVE-2021-25321
- Severity
- High · CVSS 7.7
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.44% · Oct 25, 2026
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | arpwatch | sid | 2.1a15-11 | not affected |
| Debian | arpwatch | forky | 2.1a15-11 | not affected |
| Debian | arpwatch | trixie | 2.1a15-9 | not affected |
| Debian | arpwatch | bookworm | 2.1a15-8 | not affected |
| Suse | arpwatch | linux enterprise module for basesystem 15 sp2 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise module for basesystem 15 sp3 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise high performance computing 15-espos | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise high performance computing 15-ltss | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise high performance computing 15 sp1-espos | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise high performance computing 15 sp1-ltss | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise server 15-ltss | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise server 15 sp1-bcl | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise server 15 sp1-ltss | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise server for sap applications 15 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise server for sap applications 15 sp1 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | manager proxy 4.0 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | manager retail branch server 4.0 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | manager server 4.0 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | enterprise storage 6 | 2.1a15-5.12.1 | fixed |
| Suse | arpwatch | linux enterprise point of sale 11 sp3 | 2.1a15-131.23.2.6.1 | fixed |
| Suse | arpwatch | linux enterprise server 11 sp4-ltss | 2.1a15-131.23.2.6.1 | fixed |
| Opensuse | arpwatch | tumbleweed | 3.1-1.2 | fixed |
| Opensuse | arpwatch | leap 15.2 | 2.1a15-lp152.6.9.1 | fixed |
| Opensuse | arpwatch | leap 15.3 | 2.1a15-5.12.1 | fixed |
| Ubuntu | arpwatch | 16.04 | 2.1a15-2 | vulnerable |
| Suse | arpwatch | hpe helion openstack 8 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | openstack cloud 8 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | openstack cloud 9 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | openstack cloud crowbar 8 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | openstack cloud crowbar 9 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server for sap applications 12 sp3 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server for sap applications 12 sp4 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise software development kit 12 sp5 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server 12 sp2-bcl | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server 12 sp3-ltss | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server 12 sp3-bcl | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server 12 sp4-ltss | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server 12 sp5 | 2.1a15-159.9.1 | fixed |
| Suse | arpwatch | linux enterprise server for sap applications 12 sp5 | 2.1a15-159.9.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | arpwatch | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | arpwatch | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | arpwatch | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | arpwatch | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Suse | arpwatch | rpm | linux enterprise module for basesystem 15 sp2 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise module for basesystem 15 sp3 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise high performance computing 15-espos | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise high performance computing 15-ltss | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise high performance computing 15 sp1-espos | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise high performance computing 15 sp1-ltss | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 15-ltss | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 15 sp1-bcl | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 15 sp1-ltss | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server for sap applications 15 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server for sap applications 15 sp1 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | manager proxy 4.0 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | manager retail branch server 4.0 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | manager server 4.0 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | enterprise storage 6 | 2.1a15-5.12.1 | Not reported | SUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise point of sale 11 sp3 | 2.1a15-131.23.2.6.1 | Not reported | SUSE-SU-2021:14759-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 11 sp4-ltss | 2.1a15-131.23.2.6.1 | Not reported | SUSE-SU-2021:14759-1 | Not reported |
| Opensuse | arpwatch | rpm | tumbleweed | 3.1-1.2 | Not reported | OPENSUSE-SU-2024:10634-1 | Not reported |
| Opensuse | arpwatch | rpm | leap 15.2 | 2.1a15-lp152.6.9.1 | Not reported | OPENSUSE-SU-2021:0945-1 | Not reported |
| Opensuse | arpwatch | rpm | leap 15.3 | 2.1a15-5.12.1 | Not reported | OPENSUSE-SU-2021:2177-1 | Not reported |
| Suse | arpwatch | rpm | hpe helion openstack 8 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | openstack cloud 8 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | openstack cloud 9 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | openstack cloud crowbar 8 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | openstack cloud crowbar 9 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server for sap applications 12 sp3 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server for sap applications 12 sp4 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise software development kit 12 sp5 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 12 sp2-bcl | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 12 sp3-ltss | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 12 sp3-bcl | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 12 sp4-ltss | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server 12 sp5 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
| Suse | arpwatch | rpm | linux enterprise server for sap applications 12 sp5 | 2.1a15-159.9.1 | Not reported | SUSE-SU-2021:2175-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [arpwatch-ethercodes-build]Unknown
Source package: [arpwatch]
Details (1)
3.9-1.5· x86_64 · tumbleweedUnknown · Fixed:
3.1-1.2Version impact unknown
dsa · arpwatch · opensuse · tumbleweed
- [arpwatch]Fixed
Source package: [arpwatch]
Details (1)
3.9-1.5· x86_64 · tumbleweedFixed · Fixed:
3.1-1.2dsa · arpwatch · opensuse · tumbleweed
[Debian 12 (Bookworm)]
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_14759-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2021:14759-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2175-1]
- [https://osv.dev/vulnerability/SUSE-SU-2021:2177-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2021-25321]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:0945-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2021:2177-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:10634-1]
- [https://security-tracker.debian.org/tracker/CVE-2021-25321]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]