Unrated severityNVD Advisory· Published Dec 25, 2022· Updated Apr 14, 2025

CVE-2022-37706

Description

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enlightenment/Enlightenmentcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <0.25.4
osv-coords2 versions
pkg:rpm/opensuse/enlightenment&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/enlightenment&distro=SUSE%20Package%20Hub%2015%20SP4
< 0.25.4-bp154.4.3.1+ 1 more
- (no CPE)range: < 0.25.4-bp154.4.3.1
- (no CPE)range: < 0.25.4-bp154.4.3.1

Patches

Vulnerability mechanics

References

git.enlightenment.org/enlightenment/enlightenment/commit/cae78cbb169f237862faef123e4abaf63a1f5064mitre
git.enlightenment.org/enlightenment/enlightenment/commit/cc7faeccf77fef8b0ae70e312a21e4cde087e141mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000