Stats Digest Feeds
โ† Back to all CVEs

CVE-2022-42917

MEDIUM NVD
CVSS Score 6.7
Severity MEDIUM
Published Sep 14, 2026
Vendor unknown

Description

In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.

References