Multipath-tools vulnerabilities

2 known vulnerabilities in Multipath-tools from Opensvc. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Multipath-tools: Improper Privilege Management

  CVE-2022-41974Oct 29, 2022Opensvc

  multipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited alone or in conjunction with CVE-2022-41973. Local users able to write to UNIX domain sockets can bypass access controls and manipulate the multipath setup.

• 7.8 High severity

  Multipath-tools: Improper Link Resolution Before File Access

  CVE-2022-41973Oct 29, 2022Opensvc

  multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lea