CVE-2022-1117
Summary
| CVE | CVE-2022-1117 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-29 15:15:00 UTC |
|---|
| Updated | 2023-02-12 22:15:00 UTC |
|---|
| Description | A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Fix for CVE-2022-1117 · linux-application-whitelisting/fapolicyd@38a9426 · GitHub |
MISC |
github.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| Bug Access Denied |
MISC |
bugzilla.redhat.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| 2068171 – (CVE-2022-1117) CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path |
MISC |
bugzilla.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159820 Oracle Enterprise Linux Security Update for fapolicyd (ELSA-2022-1898)
- 240306 Red Hat Update for fapolicyd security (RHSA-2022:1898)
- 240382 Red Hat Update for fapolicyd (RHSA-2022:4824)
- 282795 Fedora Security Update for fapolicyd (FEDORA-2022-47a86f6258)
- 282796 Fedora Security Update for fapolicyd (FEDORA-2022-bba9ca95b5)
- 903837 Common Base Linux Mariner (CBL-Mariner) Security Update for fapolicyd (10863)
- 907308 Common Base Linux Mariner (CBL-Mariner) Security Update for fapolicyd (10863-1)
- 940545 AlmaLinux Security Update for fapolicyd (ALSA-2022:1898)
- 960245 Rocky Linux Security Update for fapolicyd (RLSA-2022:1898)
