PT-2023-13556 · Unknown+4 · Device-Mapper-Multipath+4

Tomas Hoger · Published 2022-11-07 · Updated 2025-02-18 · CVE-2022-3787

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions device-mapper-multipath (affected versions not specified)

Description A local privilege escalation issue exists, allowing local users to obtain root access by exploiting a flaw in the handling of UNIX domain sockets. This can be achieved by manipulating the multipath setup, taking advantage of the mishandling of repeated keywords when arithmetic ADD is used instead of bitwise OR.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

ALSA-2022:7928

ALSA-2022:8453

CESA-2022_7928

CVE-2022-3787

RHSA-2022:7928

RHSA-2022:8453

RHSA-2022_7928

RHSA-2022_8453

RLSA-2022:7928

RLSA-2022:8453

Affected Products

Almalinux

Centos

Red Hat

Rocky Linux

Device-Mapper-Multipath

References · 18

• https://osv.dev/vulnerability/RLSA-2022:8453 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3787 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-3787 · Security Note
• https://errata.rockylinux.org/RLSA-2022:8453 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2138959 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2022-8453.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:7928 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-7928.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:8453 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:7928 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:7928 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2022:8453 · Note
• https://t.me/cibsecurity/61141 · Telegram Post
• https://access.redhat.com/security/cve/CVE-2022-3787 · Note