Lucene search
Veracode Vulnerability DatabaseVERACODE:35891HistoryJun 06, 2022 - 12:17 p.m.
Privilege Escalation
2022-06-0612:17:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
logrotate vulnerability
privilege escalation
permission verification
state file
world-readable
attacker prevention
EPSS
0.001
Percentile
44.4%
logrotate is vulnerable to privilege escalation. The vulnerability exists due to a lack of verification of the permission of a state file which creates a world-readable permission file when it doesn’t exists allowing an attacker to lock the state file and prevent any rotation.
References
www.openwall.com/lists/oss-security/2022/05/25/3
www.openwall.com/lists/oss-security/2022/05/25/4
www.openwall.com/lists/oss-security/2022/05/25/5
bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348
lists.fedoraproject.org/archives/list/[email protected]/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/
lists.fedoraproject.org/archives/list/[email protected]/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/
security-tracker.debian.org/tracker/CVE-2022-1348
Related
nessus
nessus
Amazon Linux 2022 : (ALAS2022-2022-095)
2022-09-06 00:00:00
Ubuntu 22.04 LTS : logrotate vulnerability (USN-5447-1)
2022-05-27 00:00:00
Rocky Linux 9 : logrotate (RLSA-2022:8393)
2023-11-07 00:00:00
osv
osv
logrotate vulnerability
2022-05-26 11:51:24
Moderate: logrotate security update
2022-11-15 00:00:00
Moderate: logrotate security update
2022-11-15 06:23:14
openvas
openvas
Fedora: Security Advisory for logrotate (FEDORA-2022-ff0188b37c)
2022-06-13 00:00:00
Fedora: Security Advisory for logrotate (FEDORA-2022-87c0f05204)
2022-05-29 00:00:00
openSUSE: Security Advisory for logrotate (SUSE-SU-2022:2396-1)
2022-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: logrotate-3.20.1-1.fc36
2022-05-28 01:16:35
[SECURITY] Fedora 35 Update: logrotate-3.18.1-4.fc35
2022-06-12 01:16:42
cbl_mariner
cbl_mariner
CVE-2022-1348 affecting package logrotate 3.18.1-1
2022-07-14 20:59:55
CVE-2022-1348 affecting package logrotate for versions less than 3.20.1-1
2022-06-26 03:29:37
ubuntu
ubuntu
logrotate vulnerability
2022-05-26 00:00:00
nvd
nvd
CVE-2022-1348
2022-05-25 16:15:08
cvelist
cvelist
CVE-2022-1348
2022-05-25 15:13:39
suse
suse
Security update for logrotate (important)
2022-07-14 00:00:00
almalinux
almalinux
Moderate: logrotate security update
2022-11-15 00:00:00
cve
cve
CVE-2022-1348
2022-05-25 16:15:08
redhatcve
redhatcve
CVE-2022-1348
2022-05-25 13:19:54
rocky
rocky
logrotate security update
2022-11-15 06:23:14
oraclelinux
oraclelinux
logrotate security update
2022-11-22 00:00:00
redhat
redhat
(RHSA-2022:8393) Moderate: logrotate security update
2022-11-15 06:23:14
prion
prion
Session fixation
2022-05-25 16:15:00
mageia
mageia
Updated logrotate packages fix security vulnerability
2022-06-03 20:15:11
ubuntucve
ubuntucve
CVE-2022-1348
2022-05-25 00:00:00
alpinelinux
alpinelinux
CVE-2022-1348
2022-05-25 16:15:08
debiancve
debiancve
CVE-2022-1348
2022-05-25 16:15:08
photon
photon
Moderate Photon OS Security Update - PHSA-2023-4.0-0349
2023-03-07 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00