PT-2022-2283 · Swhkd · Swhkd

Mgerstner · Published 2022-03-29 · Updated 2022-10-06 · CVE-2022-27815

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions SWHKD versions 1.1.5 and prior

Description The issue is related to the use of the /tmp/swhkd.pid pathname by the SWHKD daemon, which can lead to information leaks or denial of service. This is because the /tmp directory is accessible to all users. The exploitation of this issue may allow a remote attacker to access protected information or cause a denial of service.

Recommendations For SWHKD versions 1.1.5 and prior, consider updating to a version where this issue is fixed, such as a version from the 1.1.0 branch of the repository, where a patch is available. As a temporary workaround, consider restricting access to the /tmp/swhkd.pid file to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-377

CWE-59

Related Identifiers

BDU:2022-02458

CVE-2022-27815

GHSA-P4JG-PCCF-H82C

Affected Products

Swhkd

References · 12

• 🔥 http://openwall.com/lists/oss-security/2022/04/14/1 · Exploit
• https://github.com/waycrate/swhkd/commit/e661a4940df78fbb7b52c622ac4ae6a3a7f7d8aa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-27815 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27815 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p4jg-pccf-h82c · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02458 · Security Note
• https://github.com/waycrate/swhkd/releases · Note
• https://github.com/waycrate/swhkd/releases/tag/1.2.0 · Note
• https://github.com/waycrate/swhkd · Note
• https://vuldb.com/ru/?id.196041 · Note
• https://opennet.ru/opennews/art.shtml?num=57032 · Note
• https://t.me/cibsecurity/39797 · Telegram Post