PT-2022-13349 · Debian · Debian

Published 2022-03-02 · Updated 2022-03-09 · CVE-2022-0675

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue arises when an unmanaged rule on the target system shares the same comment as a rule specified in the manifest. This can lead to the existence of unmanaged rules on the system, potentially leaving it in an unsafe state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1289

CWE-20

Related Identifiers

CVE-2022-0675

RHSA-2022:5116

RHSA-2022:8869

Affected Products

Debian

References · 9

• https://puppet.com/security/cve/CVE-2022-0675 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0675 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0675 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0675 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0675 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0675 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0675 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0675 · Security Note
• https://t.me/cibsecurity/38330 · Telegram Post