A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8393 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-8393 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:8393 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:8393 advisory.

  - logrotate: potential DoS from unprivileged users via the state file (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-189 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-095 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-084 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2396-1 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 21.10 / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5447-1 advisory.

  - A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent     parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the     state file does not exist, it is created with world-readable permission, allowing an unprivileged user to     lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
    (CVE-2022-1348)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184837	Rocky Linux 9 : logrotate (RLSA-2022:8393)	Nessus	Rocky Linux Local Security Checks	medium
168098	Oracle Linux 9 : logrotate (ELSA-2022-8393)	Nessus	Oracle Linux Local Security Checks	medium
167837	AlmaLinux 9 : logrotate (ALSA-2022:8393)	Nessus	Alma Linux Local Security Checks	medium
167602	RHEL 9 : logrotate (RHSA-2022:8393)	Nessus	Red Hat Local Security Checks	medium
167003	Amazon Linux 2022 : (ALAS2022-2022-189)	Nessus	Amazon Linux Local Security Checks	medium
164753	Amazon Linux 2022 : (ALAS2022-2022-095)	Nessus	Amazon Linux Local Security Checks	medium
164719	Amazon Linux 2022 : (ALAS2022-2022-084)	Nessus	Amazon Linux Local Security Checks	medium
163240	SUSE SLED15 / SLES15 Security Update : logrotate (SUSE-SU-2022:2396-1)	Nessus	SuSE Local Security Checks	medium
161615	Ubuntu 22.04 LTS : logrotate vulnerability (USN-5447-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2022-1348

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium