Mist is the command-line interface for the makedeb Package Repository. Prior to version 0.9.5, a user-provided `sudo` binary via the `PATH` variable can allow a local user to run arbitrary commands on the user's system with root permissions. Versions 0.9.5 and later contain a patch. No known workarounds exist.
References
Link | Resource |
---|---|
https://github.com/makedeb/mist/commit/e257561a32cffe3c541b265097959adaea3d6b67 | Patch Third Party Advisory |
https://github.com/makedeb/mist/releases/tag/v0.9.5 | Third Party Advisory |
https://github.com/makedeb/mist/security/advisories/GHSA-pxg4-7c7r-2ww6 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: GitHub_M
Published: 2022-09-26T13:55:10
Updated: 2022-09-26T13:55:10
Reserved: 2022-09-02T00:00:00
Link: CVE-2022-39245
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-09-26T14:15:10.757
Modified: 2023-07-13T17:24:48.483
Link: CVE-2022-39245
JSON object: View
Redhat Information
No data.