CVE-2022-21950 canna: unsafe handling of /tmp/.iroha_unix directory
Local attackers can hijack the UNIX domain socket due to improper access control on the /tmp/.iroha_unix directory in the canna service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-21950?
CVE-2022-21950 is a medium-severity missing authorization vulnerability in openSUSE Backports SLE-15-SP3, published on 7 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.
Weakness: CWE-284
Which versions are affected by CVE-2022-21950?
It affects 1 product.
Linux distribution packages (4)
canna SUSE:Package Hub 15 SP3 | All versions | 3.7p3-bp153.2.3.1 |
canna SUSE:Package Hub 15 SP4 | All versions | 3.7p3-bp154.3.3.1 |
canna openSUSE:Leap 15.3 | All versions | 3.7p3-bp153.2.3.1 |
canna openSUSE:Leap 15.4 | All versions | 3.7p3-bp154.3.3.1 |
Products include Opensuse Canna.
How do I fix CVE-2022-21950?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2022-21950 being exploited?
There is no known exploitation of CVE-2022-21950 in the wild and no public exploit code.
Sources
Also known as GHSA-3485-7x7c-qrw2, MGASA-2022-0306, openSUSE-SU-2022:10090-1, openSUSE-SU-2022:10091-1.