PT-2022-13668 · Fapolicyd+4 · Fapolicyd+4

Pedro Sampaio · Published 2022-05-02 · Updated 2023-02-12 · CVE-2022-1117

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions fapolicyd (affected versions not specified)

Description A vulnerability was found due to an assumption on how glibc names the runtime linker. A build time regular expression may not correctly detect the runtime linker, causing pattern detection for applications launched by the runtime linker to fail and allow execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

ALSA-2022:1898

AZL-10863

CESA-2022_1898

CVE-2022-1117

RHSA-2022:1898

RHSA-2022:4824

RHSA-2022_1898

RLSA-2022:1898

Affected Products

Almalinux

Centos

Red Hat

Rocky Linux

Fapolicyd

References · 24

• https://github.com/linux-application-whitelisting/fapolicyd/commit/38a942613f93824c53164730b2b7a2f75b8cd263 · Patch
• https://errata.almalinux.org/8/ALSA-2022-1898.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1898.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1117 · Security Note
• https://osv.dev/vulnerability/ALSA-2022:1898 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1117 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-10863 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1898 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1898 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-1117 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2066300 · Note
• https://vulners.com/cve/CVE-2022-1117 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2051485 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2066904 · Note
• https://t.me/cvenotify/35335 · Telegram Post