PT-2022-13818 · Logrotate+7 · Logrotate+7

Guilherme De Almeida Suckevicz · Published 2022-05-25 · Updated 2024-09-19 · CVE-2022-1348

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions logrotate versions prior to 3.20.0

Description A flaw was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation.

Recommendations For logrotate versions prior to 3.20.0, update to version 3.20.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the state file to prevent unprivileged users from locking it.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALSA-2022:8393

ALT-PU-2022-1955

ALT-PU-2023-1925

ALT-PU-2024-11877

ALT-PU-2024-12867

AZL-9845

CVE-2022-1348

MGASA-2022-0217

OESA-2022-1724

OPENSUSE-SU-2022_2396-1

OPENSUSE-SU-2024:12108-1

RHSA-2022:8393

RHSA-2022_8393

RLSA-2022:8393

SUSE-SU-2022:2396-1

SUSE-SU-2022_2396-1

USN-5447-1

Affected Products

Alt Linux

Almalinux

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

Logrotate

References · 46

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348 · Patch
• https://ubuntu.com/security/notices/USN-5447-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-1348 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0217 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8393.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-1348 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9845 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-1348 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1348 · Security Note
• http://openwall.com/lists/oss-security/2022/05/25/5 · Patch
• https://osv.dev/vulnerability/USN-5447-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12108-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1724 · Vendor Advisory