https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:11:14 +0000 https://cve.radiocsirt.org/vuln/cve-2021-3978 <p><strong>Affected:</strong> Cloudflare octorpki</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> <p><strong>Affected:</strong> Cloudflare octorpki</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> https://cve.radiocsirt.org/vuln/cve-2021-3978