PT-2022-24696 · Alt Linux · Alt Linux

Published 2021-09-29 · Updated 2024-08-06 · CVE-2022-39051

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Template toolkit (affected versions not specified) ALT Linux (affected versions not specified)

Description The issue allows an attacker to potentially execute malicious Perl code in the Template toolkit by installing an unverified third-party package. This could be exploited if an admin installs such a package.

Recommendations For Template toolkit, avoid installing unverified third-party packages until a fix is available. For ALT Linux, refrain from installing unverified packages from third-party sources as a precautionary measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-913

Related Identifiers

ALT-PU-2021-2917

ALT-PU-2021-3039

ALT-PU-2021-3058

ALT-PU-2024-10583

CVE-2022-39051

Affected Products

Alt Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-39051 · Security Note
• https://otrs.com/release-notes/otrs-security-advisory-2022-12 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39051 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-39051 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-39051 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39051 · Vendor Advisory