{"affected":[],"cveId":"CVE-2022-42917","cwes":["CWE-367"],"description":"In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.7,"severity":"medium","source":"NVD: cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794312600177,"publishedAt":1789345015700,"references":[{"source":"cve@mitre.org","tags":[],"url":"https://bugzilla.suse.com/show_bug.cgi?id=1204124"},{"source":"cve@mitre.org","tags":[],"url":"https://frrouting.org/security/cve-2022-42917/"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/FRRouting/frr/commit/972cdc560e339d70c0ee5fb70ec636ab78f00bca"},{"source":"cve@mitre.org","tags":[],"url":"https://github.com/FRRouting/frr/compare/frr-8.4...frr-8.5"}],"remediation":[],"revision":"5babf786bdac4db18259d85e64f40b68f7a7c4e429c67d596fbf6607e124e6ec","sources":[{"modifiedAt":1794312600177,"name":"NVD","retrievedAt":1794313101617,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42917"}],"ssvc":{"assessedAt":1789398238372,"automatable":"no","exploitation":"none","source":"NVD SSVC: 134c704f-9b21-4f2e-91b3-4a467353bcc0","technicalImpact":"total"},"status":"published","title":"CVE-2022-42917","updatedAt":1794313101617}