Lucene search

GoogleOSV:CVE-2022-40299

HistorySep 09, 2022 - 1:15 a.m.

CVE-2022-40299

2022-09-0901:15:07

Google

osv.dev

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathnames; this CVE Record is not about the lack of a safe temporary-file creation capability in the Singular language.

CPENameOperatorVersion
singulareq1:4.3.2-p10+ds-1
singulareq1:4.1.1-p3+ds-1
singulareqRelease-4-2-0p3
singulareq1:4.1.1-p2+ds-4
singulareq1:4.3.1-p2+ds-1
singulareqRelease-4-2-1p3
singulareqRelease-4-0-3
singulareq1:4.3.1-p1+ds-1
singulareq1:4.1.1-p4+ds-1
singulareqSingular_4.0.0

Name	Operator	Version
singular	eq	1:4.3.2-p10+ds-1
singular	eq	1:4.1.1-p3+ds-1
singular	eq	Release-4-2-0p3
singular	eq	1:4.1.1-p2+ds-4
singular	eq	1:4.3.1-p2+ds-1
singular	eq	Release-4-2-1p3
singular	eq	Release-4-0-3
singular	eq	1:4.3.1-p1+ds-1
singular	eq	1:4.1.1-p4+ds-1
singular	eq	Singular_4.0.0

Rows per page:

1-10 of 561

References

michael.orlitzky.com/cves/cve-2022-40299.xhtml

github.com/Singular/Singular/commit/5f28fbf066626fa9c4a8f0e6408c0bb362fb386c

github.com/Singular/Singular/issues/1137

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:CVE-2022-40299