Skip to content
Fencer Vulns
high 7.0

CVE-2022-29527 json

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and…

published 2022-04-20 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-33863

cvss
7.0
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 22%
public exploits
0
none known

Summary

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.

Patch / fix

  • amazon amazon_ssm_agent 3.1.1208.0
  • amazon-ssm-agent SLE Module for Public Cloud 12 3.1.1260.0-4.27.2
  • amazon-ssm-agent SLE Module for Public Cloud 15 SP3, SLE Module for Public Cloud 15 SP2, SLE Module for Public Cloud 15 SP1 +3 more 3.1.1260.0-150000.5.9.2

suse advisories SUSE-SU-2022:3654-1SUSE-SU-2022:1510-1

  • amazon-ssm-agent openSUSE Tumbleweed 3.1.1260.0-1.1

opensuse advisories openSUSE-SU-2024:12012-1

Exploit prediction

0.30% chance of exploitation in the next 30 days, higher than 22% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • bugzilla.suse.com https://bugzilla.suse.com/show_bug.cgi?id=1196556 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.9 AV:L/AC:M/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
  • CWE-732 Incorrect Permission Assignment for Critical Resource

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.