CVE-2022-3787
First published: Mon Oct 31 2022(Updated: )
A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Device-mapper-multipath | ||
| Redhat Enterprise Linux | =8.7 | |
| Redhat Enterprise Linux | =9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=2138959
- https://access.redhat.com/security/cve/CVE-2022-41974
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2133988
- https://access.redhat.com/errata/RHSA-2022:7192
- https://access.redhat.com/errata/RHSA-2022:7185
- https://access.redhat.com/security/cve/CVE-2022-3787
- https://access.redhat.com/errata/RHSA-2022:7928
- https://access.redhat.com/errata/RHSA-2022:8453
- https://access.redhat.com/security/cve/cve-2022-3787
Frequently Asked Questions
What is CVE-2022-3787?
CVE-2022-3787 is a vulnerability found in the device-mapper-multipath software that allows local users to obtain root access.
How can CVE-2022-3787 be exploited?
CVE-2022-3787 can be exploited by local users who are able to write to UNIX domain sockets, allowing them to bypass access controls and manipulate the multipath set.
Which software is affected by CVE-2022-3787?
CVE-2022-3787 affects Redhat Device-mapper-multipath versions, specifically Redhat Enterprise Linux 8.7 and 9.1.
What is the severity of CVE-2022-3787?
CVE-2022-3787 has a severity rating of 7.8 (high).
How can I fix CVE-2022-3787?
To fix CVE-2022-3787, it is recommended to apply the necessary patches or updates provided by Redhat Enterprise Linux.
- collector/nvd-index
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-3787
- agent/author
- agent/references
- agent/severity
- agent/weakness
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/redhat
- canonical/redhat device-mapper-multipath
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.7
- version/redhat enterprise linux/9.1