CVE-2022-29527
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows...
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- Record
CVE-2022-29527- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-362, CWE-732
- Updated
- 2026-11-02
CVE List No score
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- Record
CVE-2022-29527- Updated
- 2026-11-02
EUVDEUVD-2022-33863 No score
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- Record
EUVD-2022-33863- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87pw-p9qx-p46w
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows...
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- Record
GHSA-87pw-p9qx-p46w- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition.
- Record
CVE-2022-29527- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12012-1 No score
amazon-ssm-agent-3.1.1260.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.1.1260.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12012-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1510-1 No score
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues:
- CVE-2022-29527: Fixed unsafe file creation mode of ssm-agent-users sudoer file (bsc#1196556).
Update to version 3.1.1260.0
- Record
SUSE-SU-2022:1510-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3654-1 No score
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues:
- Update to version 3.1.1260.0
- CVE-2022-29527: Fixed a bug which creates world-writable sudoers file during runtime. (bsc#1196556)
- Record
SUSE-SU-2022:3654-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
amazon-ssm-agentSUSE:Linux Enterprise Module for Public Cloud 15 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP1 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP2 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP3 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentopenSUSE:Leap 15.3 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentopenSUSE:Leap 15.4 |
before 3.1.1260.0-150000.5.9.2 | 3.1.1260.0-150000.5.9.2 |
amazon-ssm-agentSUSE:Linux Enterprise Module for Public Cloud 12 |
before 3.1.1260.0-4.27.2 | 3.1.1260.0-4.27.2 |
amazon-ssm-agentopenSUSE:Tumbleweed |
before 3.1.1260.0-1.1 | 3.1.1260.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29527 is a high vulnerability (CVSS 7.0) in Amazon Ssm Agent, published April 20, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in amazon-ssm-agent 3.1.1260.0-150000.5.9.2.
References
github.com/aws/amazon-ssm-agent/releases/tag/3.1.1208.0
bugzilla.suse.com/show_bug.cgi?id=1196556
nvd.nist.gov/vuln/detail/CVE-2022-29527