A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead of bitwise OR. This could lead to local privilege escalation to root.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8453 advisory.

  - A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users     to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to     write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue     occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead     of bitwise OR. This could lead to local privilege escalation to root. (CVE-2022-3787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-126 advisory.

    A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users     to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to     write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue     occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead     of bitwise OR. This could lead to local privilege escalation to root. (CVE-2022-3787)

    A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users     to obtain root access, in conjunction with CVE-2022-41974. Local users that are able to access /dev/shm     can change symlinks in multipathd due to incorrect symlink handling, which may lead to controlled file     writes outside of the /dev/shm directory. This could be used indirectly for local privilege escalation to     root. (CVE-2022-41973)

    multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited     alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass     access controls and manipulate the multipath setup. This can lead to local privilege escalation to root.
    This occurs because an attacker can repeat a keyword, which is mishandled because arithmetic ADD is used     instead of bitwise OR. (CVE-2022-41974)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7928 advisory.

  - A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users     to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to     write to UNIX domain sockets can bypass access controls and manipulate the multipath setup. This issue     occurs because an attacker can repeat a keyword, which is mishandled when arithmetic ADD is used instead     of bitwise OR. This could lead to local privilege escalation to root. (CVE-2022-3787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8453 advisory.

    [0.8.7-12.1]
    - Add 0062-multipathd-ignore-duplicated-multipathd-command-keys.patch
    - Resolves: bz #2133998

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:8453 advisory.

  - device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux (CVE-2022-3787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7928 advisory.

    [0.8.4-28.1]
    - Add 0111-multipathd-ignore-duplicated-multipathd-command-keys.patch
    - Resolves: bz #2133995

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8453 advisory.

    The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to     manage multipath devices.

    Security Fix(es):

    * device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux (CVE-2022-3787)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:7928 advisory.

  - device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux (CVE-2022-3787)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:7928 advisory.

    The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to     manage multipath devices.

    Security Fix(es):

    * device-mapper-multipath: Regression of CVE-2022-41974 fix in Red Hat Enterprise Linux (CVE-2022-3787)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184635	Rocky Linux 9 : device-mapper-multipath (RLSA-2022:8453)	Nessus	Rocky Linux Local Security Checks	high
173185	Amazon Linux 2023 : device-mapper-multipath, device-mapper-multipath-devel, device-mapper-multipath-libs (ALAS2023-2023-126)	Nessus	Amazon Linux Local Security Checks	high
170782	Rocky Linux 8 : device-mapper-multipath (RLSA-2022:7928)	Nessus	Rocky Linux Local Security Checks	high
168162	Oracle Linux 9 : device-mapper-multipath (ELSA-2022-8453)	Nessus	Oracle Linux Local Security Checks	high
167864	AlmaLinux 9 : device-mapper-multipath (ALSA-2022:8453)	Nessus	Alma Linux Local Security Checks	high
167783	Oracle Linux 8 : device-mapper-multipath (ELSA-2022-7928)	Nessus	Oracle Linux Local Security Checks	high
167635	RHEL 9 : device-mapper-multipath (RHSA-2022:8453)	Nessus	Red Hat Local Security Checks	high
167506	AlmaLinux 8 : device-mapper-multipath (ALSA-2022:7928)	Nessus	Alma Linux Local Security Checks	high
167501	RHEL 8 : device-mapper-multipath (RHSA-2022:7928)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2022-3787

high

Tenable Plugins

high

high

high

high

high

high

high

high

high