CVE-2022-21950

canna: unsafe handling of /tmp/.iroha_unix directory

5.3 MediumFix available

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE Backports SLE-15-SP4 canna versions prior to 3.7p3-bp154.3.3.1. openSUSE Factory was also affected. Instead of fixing the package it was deleted there.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.15%Down 0.7 points since Sep 8, 2022

What each source reports

CVE List Score used 5.3

canna: unsafe handling of /tmp/.iroha_unix directory

Record: CVE-2022-21950
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-284
Updated: 2026-11-02

EUVDEUVD-2022-27106 5.3

Record: EUVD-2022-27106
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3485-7x7c-qrw2 7.8

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE...

Record: GHSA-3485-7x7c-qrw2
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-284
Updated: 2026-11-02

NVD 5.3

Record: CVE-2022-21950
CVSS 3.1: 5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-284
Updated: 2026-11-02

OSVMGASA-2022-0306 No score

Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. (CVE-2022-21950)

Record: MGASA-2022-0306
Updated: 2026-11-02

OSVopenSUSE-SU-2022:10090-1 No score

Security update for canna

This update for canna fixes the following issues:

CVE-2022-21950: move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets (boo#1199280).

Record: openSUSE-SU-2022:10090-1
Updated: 2026-11-02

OSVopenSUSE-SU-2022:10091-1 No score

Security update for canna

This update for canna fixes the following issues:

CVE-2022-21950: Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets (boo#1199280).

Record: openSUSE-SU-2022:10091-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`canna` Mageia:8	before 3.7p3-25.1.mga8	3.7p3-25.1.mga8
`canna` SUSE:Package Hub 15 SP3	before 3.7p3-bp153.2.3.1	3.7p3-bp153.2.3.1
`canna` openSUSE:Leap 15.3	before 3.7p3-bp153.2.3.1	3.7p3-bp153.2.3.1
`canna` SUSE:Package Hub 15 SP4	before 3.7p3-bp154.3.3.1	3.7p3-bp154.3.3.1
`canna` openSUSE:Leap 15.4	before 3.7p3-bp154.3.3.1	3.7p3-bp154.3.3.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-21950 is a medium vulnerability (CVSS 5.3) in Opensuse Canna, published August 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in canna 3.7p3-25.1.mga8.