CVE-2022-1117 Vulnerability Details

  /     /     /  

CVE-2022-1117 Metadata Quick Info

CVE Published: 29/08/2022 | CVE Updated: 02/08/2024 | CVE Year: 2022
Source: redhat | Vendor: n/a | Product: fapolicyd
Status : PUBLISHED

---

CVE-2022-1117 Description

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-552
CWE Name: CWE-552 - Files or Directories Accessible to External Parties.
Source: n/a

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).