CVE-2022-2787

Published: Aug 27, 2022Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

Affected (3)

Products: Debian: Debian Linux, Schroot

Debian

2 products

Debian Linux

Schroot

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Schroot	Before 1.6.13

Related CWEs

CWE-281

Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

References (8)

https://codeberg.org/shelter/reschroot/commit/6f7166a285e1e97aea390be633591f9791b29a6d

Source: security@debian.org

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/08/msg00007.html

Source: security@debian.org

Mailing ListVendor Advisory

https://lists.debian.org/debian-security-announce/2022/msg00182.html

Source: security@debian.org

Mailing ListVendor Advisory

https://security.gentoo.org/glsa/202210-11

Source: security@debian.org

Third Party Advisory

https://codeberg.org/shelter/reschroot/commit/6f7166a285e1e97aea390be633591f9791b29a6d

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/08/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

https://lists.debian.org/debian-security-announce/2022/msg00182.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

https://security.gentoo.org/glsa/202210-11

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.