PT-2022-20611 · Unknown+3 · C-Uitl/C-Shquote+4

G. Hechenberger + 3 · Published 2022-06-25 · Updated 2023-05-03 · CVE-2022-31212

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dbus-broker versions prior to 31

Description An issue was discovered in dbus-broker where it depends on c-uitl/c-shquote to parse the DBus service's Exec line. c-shquote contains a stack-based buffer over-read if a malicious Exec line is supplied.

Recommendations For versions prior to 31, update to version 31 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Exec line in the DBus service configuration to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2022:6608

CVE-2022-31212

OESA-2022-2116

OPENSUSE-SU-2022:10030-1

RHSA-2022:6608

RHSA-2022_6608

RLSA-2022:6608

Affected Products

Almalinux

Red Hat

Rocky Linux

C-Uitl/C-Shquote

Dbus-Broker

References · 34

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/memory-corruption-vulnerabilities-dbus-broker · Exploit
• https://github.com/bus1/dbus-broker/compare/v30...v31 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31212 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31212 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:6608 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-31212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31212 · Security Note
• https://security.gentoo.org/glsa/202305-04 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-6608.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31213 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-31212 · Security Note
• https://ubuntu.com/security/CVE-2022-31212 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2116 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:6608 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-6608.html · Vendor Advisory