CVE-2022-1348
6.5MEDIUMA vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock
게시됨: 5/25/2022업데이트됨: 6/9/2025
설명
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
AI 분석AI 기반
영향받는 제품
logrotate_projectlogrotate
fedoraprojectfedora
35
fedoraprojectfedora
36
참조
- http://www.openwall.com/lists/oss-security/2022/05/25/3Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/05/25/4Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/05/25/5Mailing ListPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348Issue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/
- http://www.openwall.com/lists/oss-security/2022/05/25/3Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/05/25/4Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2022/05/25/5Mailing ListPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348Issue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/