CVE-2022-22704

The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.
References
Link Resource
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:zabbix:zabbix-agent2:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix-agent2:5.4.9:-:*:*:*:*:*:*
cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*

History

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-269 CWE-909

Information

Published : 2022-01-06 05:15

Updated : 2024-02-28 18:48


NVD link : CVE-2022-22704

Mitre link : CVE-2022-22704

CVE.ORG link : CVE-2022-22704


JSON object : View

Products Affected

zabbix

  • zabbix-agent2

alpinelinux

  • alpine_linux
CWE
CWE-909

Missing Initialization of Resource