CVE-2022-31252
permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
- Record
CVE-2022-31252- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
EUVDEUVD-2022-52829
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
- Record
EUVD-2022-52829- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hr65-wxm7-w4jv
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5;...
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
- Record
GHSA-hr65-wxm7-w4jv- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
NVD
A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.
- Record
CVE-2022-31252- CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-863
- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10128-1 No score
Security update for permissions
This update for permissions fixes the following issues:
Update to version 20200127:
- chkstat: also consider group controlled paths (boo#1203018, CVE-2022-31252)
- Record
openSUSE-SU-2022:10128-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12335-1 No score
chkstat-1599_20220912-1.1 on GA media
These are all security issues fixed in the chkstat-1599_20220912-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12335-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3353-1 No score
Security update for permissions
This update for permissions fixes the following issues:
- CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).
- Record
SUSE-SU-2022:3353-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3382-1 No score
Security update for permissions
This update for permissions fixes the following issues:
-
CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).
-
Add capability for prometheus-blackbox_exporter (bsc#1191194).
-
Make btmp root:utmp (bsc#1050467).
- Record
SUSE-SU-2022:3382-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:3394-1 No score
Security update for permissions
This update for permissions fixes the following issues:
- CVE-2022-31252: Fixed chkstat group controlled paths (bsc#1203018).
- Record
SUSE-SU-2022:3394-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
permissionsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 20201225-150400.5.11.1 | 20201225-150400.5.11.1 |
permissionsopenSUSE:Leap 15.4 |
before 20201225-150400.5.11.1 | 20201225-150400.5.11.1 |
permissionsSUSE:Linux Enterprise Server 12 SP5 |
before 20170707-6.10.1 | 20170707-6.10.1 |
permissionsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 20170707-6.10.1 | 20170707-6.10.1 |
permissionsSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 20181225-150200.23.15.1 | 20181225-150200.23.15.1 |
permissionsSUSE:Linux Enterprise Micro 5.1 |
before 20181225-150200.23.15.1 | 20181225-150200.23.15.1 |
permissionsSUSE:Linux Enterprise Micro 5.2 |
before 20181225-150200.23.15.1 | 20181225-150200.23.15.1 |
permissionsopenSUSE:Leap Micro 5.2 |
before 20181225-150200.23.15.1 | 20181225-150200.23.15.1 |
permissionsopenSUSE:Leap 15.3 |
before 20181225-150200.23.15.1 | 20181225-150200.23.15.1 |
permissionsopenSUSE:Leap 15.3 |
before 20200127-lp153.24.12.1 | 20200127-lp153.24.12.1 |
permissionsopenSUSE:Tumbleweed |
before 1599_20220912-1.1 | 1599_20220912-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-31252 is a medium vulnerability (CVSS 4.4) in Opensuse Leap, published September 19, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. Fixed in permissions 20201225-150400.5.11.1.