VYPR

rpm package

suse/amazon-ssm-agent&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP2

pkg:rpm/suse/amazon-ssm-agent&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP2

Vulnerabilities (1)

  • CVE-2022-29527Apr 20, 2022
    affected < 3.1.1260.0-150000.5.9.2fixed 3.1.1260.0-150000.5.9.2

    Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.