Improper Privilege Management in systemd - CVE-2022-4415

 

Improper Privilege Management in systemd - CVE-2022-4415

Published: December 21, 2022 / Updated: May 17, 2023


Vulnerability identifier: #VU70461
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2022-4415
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper privilege management when handling coredumps in coredump/coredump.c. A local user can gain access to sensitive information.

The vulnerability affects systems with libacl support.


Affected software

systemd
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
systemd (Ubuntu package)
rhel-- (Red Hat package)
libudev-devel
systemd-bash-completion
libsystemd0
systemd-debugsource
libudev1-debuginfo
libsystemd0-32bit
udev-debuginfo
libudev1-debuginfo-32bit
systemd-sysvinit
systemd-debuginfo-32bit
libudev1
libudev1-32bit
systemd-debuginfo
systemd-devel
libsystemd0-debuginfo-32bit
systemd-32bit
libsystemd0-debuginfo
udev
systemd (Red Hat package)
nss-myhostname-debuginfo
nss-myhostname
nss-mymachines-32bit-debuginfo
nss-mymachines-32bit
systemd-logger
nss-resolve-debuginfo
nss-resolve
nss-mymachines-debuginfo
nss-mymachines
systemd-journal-remote-debuginfo
systemd-journal-remote
systemd-container-debuginfo
systemd-container
nss-systemd-debuginfo
nss-systemd
systemd-lang
systemd-32bit-debuginfo
nss-myhostname-32bit-debuginfo
nss-myhostname-32bit
libudev1-32bit-debuginfo
libudev-devel-32bit
systemd-network-debuginfo
systemd-network
systemd-doc
systemd-coredump-debuginfo
systemd-coredump
libsystemd0-32bit-debuginfo
systemd-portable
systemd-mini-container
systemd-mini-debugsource
udev-mini-debuginfo
systemd-mini
systemd-mini-container-debuginfo
libsystemd0-mini-debuginfo
libudev-mini1-debuginfo
systemd-mini-debuginfo
libudev1-64bit
nss-mymachines-64bit-debuginfo
systemd-mini-devel
libudev-mini-devel
udev-mini
libudev-mini1
libsystemd0-mini
systemd-portable-debuginfo
systemd-64bit-debuginfo
systemd-mini-sysvinit
nss-myhostname-64bit-debuginfo
libsystemd0-64bit-debuginfo
nss-myhostname-64bit
libudev1-64bit-debuginfo
systemd-64bit
nss-mymachines-64bit
libsystemd0-64bit
libudev-devel-64bit
systemd-experimental
systemd-experimental-debuginfo
systemd-testsuite-debuginfo
systemd-testsuite
systemd-timesyncd
systemd-resolved
systemd-help
systemd-libs
systemd-pam
systemd-udev
systemd-nspawn
systemd-networkd
sys-apps/systemd
SUSE Linux Enterprise Server 15 SP3
Amazon Linux AMI
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
SUSE OpenStack Cloud
Red Hat Enterprise Linux for x86_64
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server 12 SP2 BCL
SUSE Linux Enterprise Server 12 SP4 ESPOS
SUSE Linux Enterprise Server 12 SP4 LTSS
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
Ubuntu
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
openSUSE Leap
openEuler
Fedora
Isolation Segment
VMware Tanzu Application Service for VMs
Migration Toolkit for Runtimes
Data Lakehouse
Service Telemetry Framework
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Red Hat OpenStack
IBM MQ Operator
Data Replication on Cloud Pak for Data
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
Dell Data Protection Central
Dell EMC PowerProtect Data Protection
cflinuxfs3
ObjectScale
IBM Cloud Pak for Watson AIOps
Platform Automation Toolkit
IBM supplied MQ Advanced container images
Dell PowerProtect Cyber Recovery
Robotic Process Automation for Cloud Pak
Self Node Remediation Operator
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat OpenShift Data Science
VMware Tanzu Operations Manager
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Red Hat OpenShift GitOps
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Dell EMC Container Storage Modules
HPE Moonshot 1500 Chassis Manager
Oracle Communications Cloud Native Core Policy
Cloud Pak for Security (CP4S)
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
RecoverPoint for VMs
IBM Storage Scale System
IBM Security Verify Access
IBM DS8000 Hardware Management Console
IBM CICS TX Advanced

How to mitigate CVE-2022-4415

Install updates from vendor's website.

systemd - addressed in versions 247.13, 248.12, 249.14, 250.9, 251.10, 252.4
Self Node Remediation Operator - update to 0.5.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.1
Migration Toolkit for Runtimes - update to 1.0.2
Red Hat OpenShift Serverless - update to 1.27.1
Data Lakehouse - update to 1.1.0.0
OpenShift API for Data Protection (OADP) - update to 1.1.2
Service Telemetry Framework - update to 1.5.4
Red Hat OpenShift GitOps - addressed in versions 1.10.4, 1.11.3, 1.12.0
Migration Toolkit for Containers - update to 1.7.8
Multicluster Engine for Kubernetes - addressed in versions 2.0.7, 2.1.6
OpenShift Service Mesh - addressed in versions 2.3.2, 2.5.1
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.8, 2.6.5
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
Red Hat OpenShift Container Platform - addressed in versions 4.11.59, 4.12.53, 4.15.2, 4.15.3
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.7, 4.12.1, 4.12.2, 4.13.0
OpenShift Logging - addressed in versions 5.4.12, 5.5.8, 5.6.3
systemd (Ubuntu package) - addressed in versions Ubuntu Pro, 237-3ubuntu10.57, 245.4-4ubuntu3.20, 249.11-0ubuntu3.7, 251.4-1ubuntu7.1
cflinuxfs3 - update to 0.357.0
ObjectScale - update to 1.4.0
Dell EMC Container Storage Modules - update to 1.6.0
Cloud Pak for Security (CP4S) - update to 1.10.12.0
Red Hat OpenShift Data Science - update to 1.22.1
IBM MQ Operator - addressed in versions 2.0.12, 2.4.0
VMware Tanzu Operations Manager - addressed in versions 2.10.55, 3.0.6
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43
IBM Cloud Pak for Watson AIOps - update to 4.1.1
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.1
Data Replication on Cloud Pak for Data - update to 4.6.5
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.5
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
Dell Secure Connect Gateway - update to 5.14.00.16
RecoverPoint for VMs - update to 6.0.SP1.P1
IBM Storage Scale System - addressed in versions 6.1.2.8, 6.1.9.0
rhel-- (Red Hat package) - update to 8/x86_64/7418/systemd/239-68.el8_7.4/src/fd431d51/package">systemd-239-68.el8_7.4
IBM supplied MQ Advanced container images - addressed in versions 9.3.0.5-r3, 9.3.3.0-r1
IBM Security Verify Access - update to 10.0.6.0
IBM CICS TX Advanced - update to 10.1.0.0 ifix18
Dell PowerProtect Cyber Recovery - update to 19.14.0.1
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.4
IBM DS8000 Hardware Management Console - update to 89.33.34.0
libudev-devel - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1
systemd-bash-completion - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1
libsystemd0 - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-debugsource - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libudev1-debuginfo - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libsystemd0-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
udev-debuginfo - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libudev1-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1
systemd-sysvinit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1
libudev1 - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libudev1-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-debuginfo - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-devel - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libsystemd0-debuginfo-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1
systemd-32bit - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libsystemd0-debuginfo - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
udev - addressed in versions 228-150.108.2, 228-157.46.1, 228-157.49.1, 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd (Red Hat package) - addressed in versions 239-58.el8_6.13, 239-68.el8_7.4, 250-12.el9_1.3
nss-myhostname-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-myhostname - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-mymachines-32bit-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
nss-mymachines-32bit - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
systemd-logger - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
nss-resolve-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
nss-resolve - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
nss-mymachines-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
nss-mymachines - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
systemd-journal-remote-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-journal-remote - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-container-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-container - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-systemd-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-systemd - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-lang - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-32bit-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-myhostname-32bit-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
nss-myhostname-32bit - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libudev1-32bit-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libudev-devel-32bit - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1
systemd-network-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-network - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-doc - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-coredump-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-coredump - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
libsystemd0-32bit-debuginfo - addressed in versions 246.16-150300.7.57.1, 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-portable - addressed in versions 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-mini-container - update to 246.16-150300.7.60.1
systemd-mini-debugsource - update to 246.16-150300.7.60.1
udev-mini-debuginfo - update to 246.16-150300.7.60.1
systemd-mini - update to 246.16-150300.7.60.1
systemd-mini-container-debuginfo - update to 246.16-150300.7.60.1
libsystemd0-mini-debuginfo - update to 246.16-150300.7.60.1
libudev-mini1-debuginfo - update to 246.16-150300.7.60.1
systemd-mini-debuginfo - update to 246.16-150300.7.60.1
libudev1-64bit - update to 246.16-150300.7.60.1
nss-mymachines-64bit-debuginfo - update to 246.16-150300.7.60.1
systemd-mini-devel - update to 246.16-150300.7.60.1
libudev-mini-devel - update to 246.16-150300.7.60.1
udev-mini - update to 246.16-150300.7.60.1
libudev-mini1 - update to 246.16-150300.7.60.1
libsystemd0-mini - update to 246.16-150300.7.60.1
systemd-portable-debuginfo - addressed in versions 246.16-150300.7.60.1, 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-64bit-debuginfo - update to 246.16-150300.7.60.1
systemd-mini-sysvinit - update to 246.16-150300.7.60.1
nss-myhostname-64bit-debuginfo - update to 246.16-150300.7.60.1
libsystemd0-64bit-debuginfo - update to 246.16-150300.7.60.1
nss-myhostname-64bit - update to 246.16-150300.7.60.1
libudev1-64bit-debuginfo - update to 246.16-150300.7.60.1
systemd-64bit - update to 246.16-150300.7.60.1
nss-mymachines-64bit - update to 246.16-150300.7.60.1
libsystemd0-64bit - update to 246.16-150300.7.60.1
libudev-devel-64bit - update to 246.16-150300.7.60.1
systemd-experimental - addressed in versions 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-experimental-debuginfo - addressed in versions 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-testsuite-debuginfo - addressed in versions 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-testsuite - addressed in versions 249.12-150400.8.16.1, 249.14-150400.8.19.1
systemd-timesyncd - update to 249-44
systemd-resolved - update to 249-44
systemd-container - update to 249-44
systemd-devel - update to 249-44
systemd - update to 249-44
systemd-help - update to 249-44
systemd-debuginfo - update to 249-44
systemd-debugsource - update to 249-44
systemd-libs - update to 249-44
systemd-pam - update to 249-44
systemd-udev - update to 249-44
systemd-nspawn - update to 249-44
systemd-networkd - update to 249-44
systemd - addressed in versions 250.9-1.fc36, 251.10-588.fc37
sys-apps/systemd - update to 252.4
systemd - update to 252.4-1161

External References

Related Security Bulletins