PT-2022-25335 · Singular+2 · Singular+2

Orlitzky · Published 2022-09-09 · Updated 2026-04-29 · CVE-2022-40299

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Singular versions prior to 4.3.1

Description The issue is related to the use of predictable /tmp pathnames in files such as sdb.cc within the Singular interface. This predictability allows local users to gain the privileges of other users via a procedure in a file under /tmp. The problem specifically concerns the handling of temporary files by certain files in the Singular interface, not the lack of a safe temporary-file creation capability in the Singular language itself.

Recommendations For versions prior to 4.3.1, update to version 4.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to files under /tmp that are used by the Singular interface, such as those accessed by sdb.cc, to minimize the risk of exploitation.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

ALT-PU-2025-4872

CVE-2022-40299

JLSEC-2026-289

Affected Products

Alt Linux

Debian

Singular

References · 13

• 🔥 https://github.com/Singular/Singular/issues/1137 · Exploit
• 🔥 http://michael.orlitzky.com/cves/cve-2022-40299.xhtml · Exploit
• https://github.com/Singular/Singular/commit/5f28fbf066626fa9c4a8f0e6408c0bb362fb386c · Patch
• https://osv.dev/vulnerability/CVE-2022-40299 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-40299 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-40299 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-40299 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40299 · Security Note
• https://osv.dev/vulnerability/JLSEC-2026-289 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-40299 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-40299 · Vendor Advisory
• https://t.me/cibsecurity/49486 · Telegram Post
• https://t.me/cvenotify/35918 · Telegram Post