CVE-2022-22704

The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.
References
Link Resource
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368 Exploit Issue Tracking Third Party Advisory
https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:zabbix:zabbix-agent2:*:*:*:*:*:*:*:*
cpe:2.3:a:zabbix:zabbix-agent2:5.4.9:-:*:*:*:*:*:*
cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:47

Type Values Removed Values Added
References () https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368 - Exploit, Issue Tracking, Third Party Advisory () https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368 - Exploit, Issue Tracking, Third Party Advisory

08 Aug 2023, 14:21

Type Values Removed Values Added
CWE CWE-269 CWE-909

Information

Published : 2022-01-06 05:15

Updated : 2024-11-21 06:47


NVD link : CVE-2022-22704

Mitre link : CVE-2022-22704

CVE.ORG link : CVE-2022-22704


JSON object : View

Products Affected

alpinelinux

  • alpine_linux

zabbix

  • zabbix-agent2
CWE
CWE-909

Missing Initialization of Resource