Aller au contenu
6.7 Moyenne

CVE-2022-42917 In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the…

Description

In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.

Produits et versions touchés

Produit Versions touchées Corrigé en
n/a Versions non publiées
FRRouting 4.5 premières → < 4.5 4.5
Les 144658 CVE de n/a →
Suivre cette CVE