CVE-2022-25643
Critical
Description
seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSeatd
PublishedFeb 24, 2022
First seenFeb 24, 2022
How to fix
Update
- seatd_project seatd0.6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seatd_project seatd | 0.6.0 ≤ v < 0.6.4 | 0.6.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.