CVE-2022-1117

Katalog CVE

CVSS 8.4 · High EPSS 0,33%

Kerentanan Files or Directories Accessible to External Parties pada fapolicyd project fapolicyd. Skor CVSS 3.1 8.4 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.

Rincian

Terbit di NVD

29 Agustus 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.4 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-552: Files or Directories Accessible to External Parties

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 23,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/linux-application-whitelisting/fapolicyd/commit/38a942613f93824c53164730b2b7a2f75b8cd263 patch · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2022-1117 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2066904 permissions required · advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2068171 issue tracking · advisory pihak ketiga