Skip to content
Fencer Vulns
medium 4.4

CVE-2022-31252 json

permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()

published 2022-10-06 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-52829

cvss
4.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.1%
EPSS 0.1% chance of exploitation in 30 days, percentile 4%
public exploits
0
none known

Summary

A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.

Patch / fix

  • SUSE SUSE Linux Enterprise Server 12-SP5 20170707
  • openSUSE openSUSE Leap 15.3 20200127
  • openSUSE openSUSE Leap 15.4 20201225
  • openSUSE openSUSE Leap Micro 5.2 20181225
  • permissions SLE Module for Basesystem 15 SP3, SLE Micro 5.2, SLE Micro 5.1 +2 more 20181225-150200.23.15.1
  • permissions SLES for SAP 12 SP5, SLES 12 SP5 20170707-6.10.1
  • permissions SLE Module for Basesystem 15 SP4, openSUSE Leap 15.4 20201225-150400.5.11.1

suse advisories SUSE-SU-2022:3394-1SUSE-SU-2022:3382-1SUSE-SU-2022:3353-1

  • permissions openSUSE Tumbleweed 1599_20220912-1.1
  • permissions openSUSE Leap 15.3 20200127-lp153.24.12.1

opensuse advisories openSUSE-SU-2024:12335-1openSUSE-SU-2022:10128-1

Exploit prediction

0.15% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
NVD 3.1 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

  • SUSE SUSE Linux Enterprise Server 12-SP5
  • openSUSE openSUSE Leap 15.3
  • openSUSE openSUSE Leap 15.4
  • openSUSE openSUSE Leap Micro 5.2

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.