Early Access — Mondoo Vulnerability Intelligence is currently in preview.

UBUNTU-CVE-2021-41617 | Mondoo Vulnerability Intelligence

UBUNTU-CVE-2021-41617

HIGH7.0

Published Sep 26, 2021

Modified 7 months ago

Fix available

Details

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

Affected Packages

Ubuntu:22.04:LTSopenssh

Affected versions:

1:8.4p1-6ubuntu21:8.7p1-21:8.7p1-2build11:8.7p1-41:8.8p1-1

Fixed in:

1:8.9p1-3

Ubuntu:FIPS-updates:18.04:LTSopenssh

Affected versions:

1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.101:7.9p1-10~ubuntu18.04.fips.0.21:7.9p1-10~ubuntu18.04.fips.0.31:7.9p1-10~ubuntu18.04.fips.0.41:7.9p1-10~ubuntu18.04.fips.0.51:7.9p1-10~ubuntu18.04.fips.0.61:7.9p1-10~ubuntu18.04.fips.0.71:7.9p1-10~ubuntu18.04.fips.0.81:7.9p1-10~ubuntu18.04.fips.0.9

Ubuntu:Pro:FIPS:16.04:LTSopenssh

Affected versions:

1:7.2p2-4ubuntu2.fips.2.10.11:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.1

Fixed in:

1:7.2p2-4ubuntu2.fips.2.10.3

Ubuntu:Pro:FIPS:16.04:LTSopenssh

Affected versions:

1:7.2p2-4ubuntu2.fips.2.10.11:7.2p2-4ubuntu2.fips.2.21:7.2p2-4ubuntu2.fips.2.2.1

Ubuntu:Pro:18.04:LTSopenssh

Affected versions:

1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.31:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm2+2 more

Ubuntu:FIPS:20.04:LTSopenssh

Affected versions:

1:8.2p1-4ubuntu0.fips.0.2.1

Ubuntu:Pro:FIPS-updates:18.04:LTSopenssh

Affected versions:

Ubuntu:Pro:FIPS:18.04:LTSopenssh

Affected versions:

1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2

Ubuntu:20.04:LTSopenssh

Affected versions:

1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.11:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.5+3 more

Fixed in:

1:8.2p1-4ubuntu0.11

Ubuntu:FIPS-updates:20.04:LTSopenssh

Affected versions:

1:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.81:8.2p1-4ubuntu0.fips.0.9

Ubuntu:Pro:FIPS-updates:20.04:LTSopenssh

Affected versions:

1:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.81:8.2p1-4ubuntu0.fips.0.9

Fixed in:

1:8.2p1-4ubuntu0.fips.0.11

Ubuntu:Pro:FIPS:20.04:LTSopenssh

Affected versions:

1:8.2p1-4ubuntu0.fips.0.2.1

Ubuntu:Pro:16.04:LTSopenssh

Affected versions:

1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-41:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-1+13 more

Fixed in:

1:7.2p2-4ubuntu2.10+esm2

Ubuntu:FIPS:18.04:LTSopenssh

Affected versions:

1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2

Ubuntu:Pro:14.04:LTSopenssh

Affected versions:

1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-11:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-1+15 more

Ubuntu:18.04:LTSopenssh

Affected versions:

1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.31:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm2+2 more

Ubuntu:FIPS:16.04:LTSopenssh

Affected versions:

1:7.2p2-4ubuntu2.fips.2.10.11:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.1

Ubuntu:14.04:LTSopenssh

Affected versions:

1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-11:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-1+15 more

Ubuntu:16.04:LTSopenssh

Affected versions:

1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-41:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-1+13 more

Ubuntu:25.04openssh-ssh1

Affected versions:

1:7.5p1-17

Ubuntu:24.04:LTSopenssh-ssh1

Affected versions:

1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16

Ubuntu:22.04:LTSopenssh-ssh1

Affected versions:

1:7.5p1-121:7.5p1-12build11:7.5p1-13

Ubuntu:24.10openssh-ssh1

Affected versions:

1:7.5p1-161:7.5p1-17

Ubuntu:Pro:20.04:LTSopenssh-ssh1

Affected versions:

1:7.5p1-11build1

Ubuntu:Pro:18.04:LTSopenssh-ssh1

Affected versions:

1:7.5p1-101:7.5p1-81:7.5p1-91:7.5p1-9build1

References

REPORThttps://ubuntu.com/security/CVE-2021-41617 REPORThttps://ubuntu.com/security/notices/USN-5666-1 REPORThttps://ubuntu.com/security/notices/USN-6565-1 REPORThttps://www.cve.org/CVERecord?id=CVE-2021-41617 REPORThttps://www.openssh.com/security.html REPORThttps://www.openssh.com/txt/release-8.8 REPORThttps://www.openwall.com/lists/oss-security/2021/09/26/1

CVSS Analysis

CVSS v3.1

7.0

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-41617 USN-5666-1 USN-6565-1

Timeline

PublishedSep 26, 2021

ModifiedJun 3, 2025

UBUNTU-CVE-2021-41617

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline