CVE-2021-32000: 
Linux openSUSE vulnerability analysis and mitigation

A UNIX Symbolic Link (Symlink) Following vulnerability was discovered in the clone-master-clean-up.sh script of clone-master-clean-up package affecting SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1, and openSUSE Factory. The vulnerability was assigned CVE-2021-32000 and was disclosed on July 28, 2021. The flaw allows local attackers to delete arbitrary files through symlink manipulation (NIST NVD).

The vulnerability exists in potentially dangerous file system operations within the clone-master-clean-up.sh script. If an unprivileged user with a home directory places a symlink like '/home/evil/.ssh -> /', the script's rm -rf command could delete the entire file system. Additionally, other locations owned by unprivileged accounts like the postfix user in /var/spool/postfix/ could be exploited as attack vectors. The vulnerability received a CVSS v3.1 base score of 7.1 HIGH from NVD and 3.2 LOW from SUSE (NIST NVD, SUSE Bugzilla).

The vulnerability could allow local attackers to delete arbitrary files on the system through symlink manipulation. This could potentially lead to system-wide file deletion if exploited successfully (NIST NVD).

The vulnerability was fixed in updated versions of the clone-master-clean-up package. SUSE released security updates (SUSE-SU-2022:3667-1 and SUSE-SU-2022:3674-1) to address this issue. The fix includes changes to prevent symlink attacks and additional security checks when performing file operations (SUSE Bugzilla).