PT-2022-2284 · Swhkd · Swhkd

Mgerstner · Published 2022-03-29 · Updated 2022-10-27 · CVE-2022-27816

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions SWHKD version 1.1.5

Description The issue is related to the unsafe use of the /tmp/swhks.pid pathname, which can lead to data loss or a denial of service. An attacker could exploit this to impact data integrity or cause a service disruption. The vulnerability is associated with the possibility of saving the process ID to the /tmp/swhks.pid file and inserting the ID of an existing process.

Recommendations For SWHKD version 1.1.5, consider updating to a version where the issue is fixed, as a patch is available on the 1.1.0 branch of the repository. As a temporary workaround, consider restricting access to the /tmp/swhks.pid file to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-377

CWE-59

Related Identifiers

BDU:2022-02459

CVE-2022-27816

GHSA-8M49-2XJ8-67V9

Affected Products

Swhkd

References · 13

• 🔥 http://openwall.com/lists/oss-security/2022/04/14/1 · Exploit
• https://github.com/waycrate/swhkd/commit/0b620a09605afb815c6d8d8953bbb7a10a8c0575 · Patch
• https://osv.dev/vulnerability/CVE-2022-27816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27816 · Security Note
• https://bdu.fstec.ru/vul/2022-02459 · Security Note
• https://osv.dev/vulnerability/GHSA-8m49-2xj8-67v9 · Vendor Advisory
• https://github.com/waycrate/swhkd/releases · Note
• https://github.com/waycrate/swhkd/releases/tag/1.2.0 · Note
• https://github.com/waycrate/swhkd · Note
• https://t.me/cibsecurity/39795 · Telegram Post
• https://t.me/cvenotify/29426 · Telegram Post
• https://opennet.ru/opennews/art.shtml?num=57032 · Note
• https://vuldb.com/ru/?id.196042 · Note