UNIX symbolic link following in multipath-tools - CVE-2022-41973

Vulnerability identifier: #VU68723

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-41973

CWE-ID: CWE-61

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a symlink following issue. A local user can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.

Successful exploitation of this vulnerability may result in privilege escalation.

multipath-tools
PowerStore T
Oracle Linux
Debian Linux
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Anolis OS
SUSE Linux Enterprise Storage
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
Ubuntu
openEuler
Fedora
Multicluster Engine for Kubernetes
Red Hat Advanced Cluster Management for Kubernetes
Session Smart Router
Contrail Cloud
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libdmmp-devel
libdmmp
kpartx
device-mapper-multipath-sysvinit
device-mapper-multipath-libs
device-mapper-multipath-devel
device-mapper-multipath
multipath-tools (Ubuntu package)
multipath-tools-debugsource
multipath-tools-debuginfo
multipath-tools
kpartx-debuginfo
multipath-tools-devel
libdmmp0_2_0
libdmmp0_2_0-debuginfo
multipath-tools-help
device-mapper-multipath (Red Hat package)
multipath-tools (Debian package)
libmpath0
libmpath0-debuginfo
sys-fs/multipath-tools
Juniper Junos Space

Install updates from vendor's website.

multipath-tools - update to 0.9.2
Multicluster Engine for Kubernetes - addressed in versions 2.0.9, 2.1.7, 2.2.4
Red Hat Advanced Cluster Management for Kubernetes - update to 2.5.9
Red Hat OpenShift Container Platform - update to 4.13.2
libdmmp-devel - update to 0.4.9-136
libdmmp - addressed in versions 0.4.9-136, 0.8.4-37.0.1
kpartx - addressed in versions 0.4.9-136, 0.8.4-37.0.1
device-mapper-multipath-sysvinit - update to 0.4.9-136
device-mapper-multipath-libs - addressed in versions 0.4.9-136, 0.8.4-37.0.1
device-mapper-multipath-devel - addressed in versions 0.4.9-136, 0.8.4-37.0.1
device-mapper-multipath - addressed in versions 0.4.9-136, 0.8.4-37.0.1
multipath-tools (Ubuntu package) - addressed in versions 0.7.4-2ubuntu3.2, 0.8.3-1ubuntu2.1, 0.8.8-1ubuntu1.22.04.1, 0.8.8-1ubuntu1.22.10.1
multipath-tools-debugsource - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
multipath-tools-debuginfo - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
multipath-tools - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
kpartx-debuginfo - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
kpartx - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
multipath-tools-devel - addressed in versions 0.7.9+232+suse.cbc3754-3.14.1, 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
libdmmp-devel - addressed in versions 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
libdmmp0_2_0 - addressed in versions 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
libdmmp0_2_0-debuginfo - addressed in versions 0.7.9+232+suse.cbc3754-150100.3.20.1, 0.8.2+182.6d41865-150200.4.14.1, 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
multipath-tools-help - addressed in versions 0.8.4-16, 0.8.4-17
multipath-tools-debuginfo - addressed in versions 0.8.4-16, 0.8.4-17
multipath-tools-devel - addressed in versions 0.8.4-16, 0.8.4-17
multipath-tools - addressed in versions 0.8.4-16, 0.8.4-17
kpartx - addressed in versions 0.8.4-16, 0.8.4-17
multipath-tools-debugsource - addressed in versions 0.8.4-16, 0.8.4-17
device-mapper-multipath (Red Hat package) - addressed in versions 0.8.4-22.el8_6.5, 0.8.4-37.el8, 0.8.7-20.el9
multipath-tools (Debian package) - update to 0.8.5-2+deb11u1
libmpath0 - addressed in versions 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
libmpath0-debuginfo - addressed in versions 0.8.5+126+suse.8ce8da5-150300.2.14.1, 0.9.0+62+suse.3e048d4-150400.4.7.1
device-mapper-multipath - update to 0.8.7-9.fc36
device-mapper-multipath - update to 0.8.7-16
sys-fs/multipath-tools - update to 0.9.3
Dell EMC Container Storage Modules - update to 1.7.0
PowerStore T - update to 3.5.0.1-2083289
Session Smart Router - addressed in versions 6.2.3-r2, 6.2.10, 6.3.7
Contrail Cloud - update to 16.3.0
Juniper Junos Space - update to 23.1R1

• https://github.com/opensvc/multipath-tools/releases/tag/0.9.2
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-41973
• https://seclists.org/fulldisclosure/2022/Oct/25

• Multiple vulnerabilities in multipath-tools multipathd daemon
• SUSE update for multipath-tools
• SUSE update for multipath-tools
• SUSE update for multipath-tools
• SUSE update for multipath-tools
• SUSE update for multipath-tools
• Ubuntu update for multipath-tools
• Debian update for multipath-tools
• Red Hat Enterprise Linux 9 update for device-mapper-multipath
• Red Hat Enterprise Linux 8 update for device-mapper-multipath
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.5
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.0
• Multiple vulnerabilities in Juniper Networks Contrail Cloud
• Multiple vulnerabilities in Juniper Junos Space
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell PowerStore Family
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• Gentoo update for multipath-tools
• Multiple vulnerabilities in Juniper Networks Session Smart Router
• Red Hat Enterprise Linux 8.6 Extended Update Support update for device-mapper-multipath
• openEuler update for multipath-tools
• openEuler update for multipath-tools
• Amazon Linux AMI update for device-mapper-multipath
• Amazon Linux AMI update for device-mapper-multipath
• Fedora 36 update for device-mapper-multipath
• Anolis OS update for device-mapper-multipath
• Anolis OS update for device-mapper-multipath
• Juniper Session Smart Router update for third-party components