CVE-2022-21950mediumCWE-284

CVE-2022-21950: falha de média gravidade em openSUSE Backports SLE-15-SP3

canna: unsafe handling of /tmp/.iroha_unix directory

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar openSUSE Backports SLE-15-SP3+ Monitorar openSUSE Backports SLE-15-SP4

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
openSUSE · openSUSE Backports SLE-15-SP3openSUSE · openSUSE Backports SLE-15-SP4
CVEs relacionadas — openSUSE Backports SLE-15-SP3

No mesmo produto, das mais perigosas para as menos.

CVE-2022-21944HIGHwatchman: chown in watchman@.socket unit allows symlink attackEPSS 0.3%