CVE-2022-2787: stricter rules on chroot names
Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-2787?
CVE-2022-2787 is a vulnerability in Schroot that had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.
What is the severity of CVE-2022-2787?
The severity of CVE-2022-2787 is medium with a CVSS score of 4.3.
What software is affected by CVE-2022-2787?
The affected software includes Debian Schroot versions up to and excluding 1.6.13, Debian Linux 10.0, and Debian Linux 11.0.
How can I fix CVE-2022-2787?
To fix CVE-2022-2787, users should update to the latest version of Schroot.
Where can I find more information about CVE-2022-2787?
You can find more information about CVE-2022-2787 on the following references: [link1](https://codeberg.org/shelter/reschroot/commit/6f7166a285e1e97aea390be633591f9791b29a6d), [link2](https://lists.debian.org/debian-lts-announce/2022/08/msg00007.html), [link3](https://lists.debian.org/debian-security-announce/2022/msg00182.html).