Lucene search
GoogleOSV:USN-5731-1HistoryNov 17, 2022 - 1:14 p.m.
multipath-tools vulnerabilities
2022-11-1713:14:45
Google
osv.dev
7
multipath-tools
vulnerabilities
symlinks
privilege escalation
ubuntu 20.04 lts
ubuntu 22.04 lts
ubuntu 22.10
access controls
cve-2022-41973
cve-2022-41974
software
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.1%
It was discovered that multipath-tools incorrectly handled symlinks. A
local attacker could possibly use this issue, in combination with other
issues, to escalate privileges. This issue only affected Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, and Ubuntu 22.10. (CVE-2022-41973)
It was discovered that multipath-tools incorrectly handled access controls.
A local attacker could possibly use this issue, in combination with other
issues, to escalate privileges. (CVE-2022-41974)
Related
fedora
fedora
[SECURITY] Fedora 36 Update: device-mapper-multipath-0.8.7-9.fc36
2022-11-10 16:19:06
openvas
openvas
Huawei EulerOS: Security Advisory for multipath-tools (EulerOS-SA-2023-1428)
2023-03-07 00:00:00
Huawei EulerOS: Security Advisory for multipath-tools (EulerOS-SA-2023-1452)
2023-03-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3711-1)
2022-10-25 00:00:00
nessus
nessus
Debian DSA-5366-1 : multipath-tools - security update
2023-03-02 00:00:00
Fedora 36 : device-mapper-multipath (2022-6ec78b2586)
2022-12-23 00:00:00
SUSE SLES15 Security Update : multipath-tools (SUSE-SU-2022:3712-1)
2022-10-25 00:00:00
cvelist
cvelist
alpinelinux
alpinelinux
CVE-2022-41974
2022-10-29 19:15:10
CVE-2022-41973
2022-10-29 18:15:12
ubuntucve
ubuntucve
CVE-2022-41973
2022-10-24 00:00:00
CVE-2022-41974
2022-10-24 00:00:00
debiancve
debiancve
CVE-2022-41973
2022-10-29 18:15:12
CVE-2022-41974
2022-10-29 19:15:10
mageia
mageia
Updated multipath-tools packages fix security vulnerabilities
2024-03-18 19:12:23
prion
prion
Privilege escalation
2022-10-29 18:15:00
Privilege escalation
2022-10-29 19:15:00
Privilege escalation
2023-03-29 21:15:00
osv
osv
multipath-tools - security update
2022-12-29 00:00:00
CVE-2022-41974
2022-10-29 19:15:10
CVE-2022-41973
2022-10-29 18:15:12
photon
photon
Important Photon OS Security Update - PHSA-2022-0269
2022-10-24 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0476
2022-10-24 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0269
2022-10-24 00:00:00
f5
f5
K000133615 : device-mapper-multipath vulnerability CVE-2022-41974
2023-04-28 00:00:00
K000133058 : device-mapper-multipath vulnerability CVE-2022-41973
2023-03-18 00:00:00
debian
debian
[SECURITY] [DLA 3250-1] multipath-tools security update
2022-12-29 10:45:35
[SECURITY] [DSA 5366-1] multipath-tools security update
2023-03-01 11:29:12
packetstorm
packetstorm
Leeloo Multipath Authorization Bypass / Symlink Attack
2022-10-31 00:00:00
snap-confine must_mkdir_and_open_with_perms() Race Condition
2022-12-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2218
2023-08-22 08:47:43
ubuntu
ubuntu
multipath-tools vulnerabilities
2022-11-17 00:00:00
suse
suse
Security update for multipath-tools (important)
2022-10-24 00:00:00
Security update for multipath-tools (important)
2022-10-24 00:00:00
Security update for multipath-tools (important)
2022-10-24 00:00:00
redhatcve
redhatcve
nvd
nvd
gentoo
gentoo
multipath-tools: Multiple Vulnerabilities
2023-11-25 00:00:00
cve
cve
hivepro
hivepro
Linux flaws could be chained together to achieve root access
2022-12-09 05:58:41
cloudfoundry
cloudfoundry
USN-5731-1: multipath-tools vulnerabilities | Cloud Foundry
2022-12-07 00:00:00
amazon
amazon
Important: device-mapper-multipath
2022-12-01 20:31:00
qualysblog
qualysblog
Leeloo Multipath: Authorization bypass and symlink attack in multipathd (CVE-2022-41974 and CVE-2022-41973)
2022-10-26 01:57:00
Snapd Race Condition Vulnerability in snap-confine’s must_mkdir_and_open_with_perms() (CVE-2022-3328)
2022-11-30 23:29:05
Qualys Research Team: Threat Thursdays, October 2022
2022-10-28 00:58:53
thn
thn
cbl_mariner
cbl_mariner
CVE-2022-41973 affecting package device-mapper-multipath for versions less than 0.8.6-4
2023-01-17 16:46:46
CVE-2022-41974 affecting package device-mapper-multipath 0.8.6-1
2024-07-12 15:24:48
CVE-2022-41973 affecting package device-mapper-multipath 0.8.6-1
2024-07-12 15:24:48
veracode
veracode
Privilege Escalation
2022-11-19 14:27:14
Authorization Bypass
2022-11-10 00:22:58
Privilege Escalation
2023-01-18 00:45:31
oraclelinux
oraclelinux
device-mapper-multipath security and bug fix update
2023-05-24 00:00:00
device-mapper-multipath security and bug fix update
2023-05-15 00:00:00
device-mapper-multipath security update
2022-10-26 00:00:00
redhat
redhat
(RHSA-2022:7188) Important: device-mapper-multipath security update
2022-10-25 14:29:14
rocky
rocky
device-mapper-multipath security update
2022-10-25 14:41:37
device-mapper-multipath security update
2022-10-25 14:24:42
device-mapper-multipath security update
2022-11-15 15:35:59
almalinux
almalinux
Important: device-mapper-multipath security update
2022-10-25 00:00:00
Moderate: device-mapper-multipath security and bug fix update
2023-05-09 00:00:00
Moderate: device-mapper-multipath security and bug fix update
2023-05-16 00:00:00
centos
centos
device, kpartx, libdmmp security update
2022-11-30 23:01:43
redos
redos
ROS-20230217-01
2023-02-17 00:00:00
zdt
zdt
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
10.1%
Related for OSV:USN-5731-1