CVE-2022-1117

Published: Aug 29, 2022Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.

Affected (1)

Products: Fapolicyd Project: Fapolicyd

Fapolicyd Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fapolicyd Project Fapolicyd	Before 1.1.2

Related CWEs

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (8)

https://access.redhat.com/security/cve/CVE-2022-1117

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2066904

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2068171

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://github.com/linux-application-whitelisting/fapolicyd/commit/38a942613f93824c53164730b2b7a2f75b8cd263

Source: secalert@redhat.com

PatchThird Party Advisory

https://access.redhat.com/security/cve/CVE-2022-1117

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2066904

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2068171

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://github.com/linux-application-whitelisting/fapolicyd/commit/38a942613f93824c53164730b2b7a2f75b8cd263

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.