CVEvulnerability
CVE-2022-41974
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-269
Description
multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This can lead to local privilege escalation to root. This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used instead of bitwise OR.
Affected configurations
• opensvc multipath-tools (>= 0.7.0 < 0.9.2)
• fedoraproject fedora 36
• debian debian linux 10.0
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-269 Improper Privilege Management weakness
References
- http://packetstormsecurity.com/files/169611/Leeloo-Multipath-Authorization-Bypass-Symlink-Attack.html Exploit, Mailing List, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2022/Dec/4 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/25 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/24/2 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/30/2 Exploit, Mailing List, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1202739 Issue Tracking, Third Party Advisory
- https://github.com/opensvc/multipath-tools/releases/tag/0.9.2 Release Notes, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00037.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202311-06 security.gentoo.org
- https://www.debian.org/security/2023/dsa-5366 Third Party Advisory
- https://www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txt Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/169611/Leeloo-Multipath-Authorization-Bypass-Symlink-Attack.html Exploit, Mailing List, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/170176/snap-confine-must_mkdir_and_open_with_perms-Race-Condition.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2022/Dec/4 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Oct/25 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/10/24/2 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/11/30/2 Exploit, Mailing List, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1202739 Issue Tracking, Third Party Advisory
- https://github.com/opensvc/multipath-tools/releases/tag/0.9.2 Release Notes, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/12/msg00037.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIGZM5NOOMFDCITOLQEJNNX5SCRQLQVV/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202311-06 security.gentoo.org
- https://www.debian.org/security/2023/dsa-5366 Third Party Advisory
- https://www.qualys.com/2022/10/24/leeloo-multipath/leeloo-multipath.txt Exploit, Third Party Advisory