CVE-2021-25630

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user

published February 23, 2021

CVSS
—
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this check was wrong, so a normal user could start "loolforkit" and eventually get local root privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Published
2021-02-23T15:33Z
EPSS history
Timeline
  • 23 FEB 15:33Z
    "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user
    cvelistv5