CVE-2011-2921
Critical · 9.8CVSS
9.8
EPSS
83.1%
Published
Nov 19, 2019
CISA due date
—
The record
ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80047 A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote… CWE-273
- CVE-2026-61897 An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops… CWE-273
- CVE-2026-58086 As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied… CWE-273
- CVE-2026-49421 The kernel function that implements unlinkat(2) and funlinkat(2) validated the… CWE-273
- CVE-2026-0099 In onNullBinding of HostEmulationManager.java, there is a possible way to launch an… CWE-273
- CVE-2026-44073 Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of… CWE-273
- CVE-2026-32107 xrdp is an open source RDP server. CWE-273
- CVE-2026-21882 theshit is a command-line utility that automatically detects and fixes common mistakes in… CWE-273