CVE-2022-1117
High
Description
A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.
SeverityHigh
CVSS8.4
Exploit probability—
ProductFapolicyd
PublishedAug 29, 2022
First seenAug 29, 2022
Weakness typeCWE-552CWE-552
How to fix
Update
- fapolicyd_project fapolicyd1.1.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fapolicyd_project fapolicyd | v < 1.1.2 | 1.1.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.