CVE-2022-37706: High severity enlightenment terminology vulnerability
enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-37706?
CVE-2022-37706 is considered a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2022-37706?
To fix CVE-2022-37706, update Enlightenment to version 0.25.4 or later where this vulnerability has been addressed.
Who is affected by CVE-2022-37706?
CVE-2022-37706 affects local users on systems running versions of Enlightenment prior to 0.25.4.
What causes the vulnerability CVE-2022-37706?
CVE-2022-37706 is caused by the setuid root status of enlightenment_sys which mishandles pathnames starting with a /dev/.. substring.
Can CVE-2022-37706 be exploited remotely?
CVE-2022-37706 cannot be exploited remotely and requires local access to the affected system.