CVE-2022-21944: watchman: chown in watchman@.socket unit allows symlink attack
A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local attackers to escalate to root. This issue affects: openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0. openSUSE Factory watchman versions prior to 4.9.0-9.1.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-21944.
What is the severity of CVE-2022-21944?
The severity of CVE-2022-21944 is high, with a severity value of 7.8.
What is the affected software?
The affected software for CVE-2022-21944 is openSUSE Backports SLE-15-SP3 watchman versions prior to 4.9.0 and openSUSE Factory watchman versions prior to 4.9.1.
How does the vulnerability in the systemd service file for watchman allow attackers to escalate to root?
The vulnerability allows local attackers to escalate to root by exploiting a UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman.
How can I fix CVE-2022-21944?
To fix CVE-2022-21944, update to openSUSE Backports SLE-15-SP3 watchman version 4.9.0 or later, or update to openSUSE Factory watchman version 4.9.1 or later.