CVE-2021-44038

Name of the Vulnerable Software and Affected Versions: Quagga versions through 1.2.4

Description: An issue was discovered that allows users with control of the non-root-owned directory /etc/quagga to escalate their privileges to root upon package installation or update due to unsafe chown/chmod operations in the suggested spec file.

Recommendations: For Quagga versions through 1.2.4, consider restricting access to the /etc/quagga directory to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.