CVE-2022-1348: Medium severity logrotate vulnerability
A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1348?
CVE-2022-1348 has been classified as a medium severity vulnerability due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2022-1348?
To fix CVE-2022-1348, ensure that logrotate is updated to a version that addresses this issue, specifically versions higher than 3.20.0.
What systems are affected by CVE-2022-1348?
CVE-2022-1348 affects logrotate versions from 3.17.0 to 3.20.0, as well as Fedora versions 35 and 36.
What kind of data can be exposed by CVE-2022-1348?
CVE-2022-1348 can potentially expose logrotate state files, which may contain sensitive information regarding log processing.
Is there a workaround for CVE-2022-1348?
A potential workaround for CVE-2022-1348 is to manually adjust the permissions of the state file to limit access until a proper update is applied.