Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-21950

canna: unsafe handling of /tmp/.iroha_unix directory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE openSUSE Backports SLE-15-SP3

  • canna to < canna-3.7p3-bp153.2.3.1affected

openSUSE openSUSE Backports SLE-15-SP4

  • canna to < 3.7p3-bp154.3.3.1affected

References