PT-2022-19663 · Line+1 · Line+1

Published 2022-04-27 · Updated 2022-05-06 · CVE-2022-29505

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LINE for Windows versions prior to 7.8

Description The issue is caused by a build misconfiguration in the openssl dependency, which makes the software vulnerable to DLL injection. This could potentially lead to privilege escalation.

Recommendations For versions prior to 7.8, update to version 7.8 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system resources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2022-29505

Affected Products

Line

Openssl

References · 4

• https://osv.dev/vulnerability/CVE-2022-29505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29505 · Security Note
• https://hackerone.com/reports/1423049 · Note
• https://t.me/cibsecurity/41495 · Telegram Post