Local Privilege Escalation Vulnerability in Octorpki by Cloudflare

CVE-2021-3978

What is CVE-2021-3978?

A local privilege escalation vulnerability exists in Octorpki due to improper handling of file permissions during the rsync operation. When files are copied using the '-a' flag, binaries may inadvertently retain the suid bit set as root. This misconfiguration, when exploited alongside another vulnerability that allows processing of a malicious TAL file, could enable unauthorized users to gain elevated privileges on the system.

References