Every CVE Search/ Get API key

CVE-2022-31256

sendmail: mail to root privilege escalation via sm-client.pre script

7.7 HighFix available

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.25%Down 0.6 points since Oct 27, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.7

sendmail: mail to root privilege escalation via sm-client.pre script

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Record
CVE-2022-31256
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
EUVDEUVD-2022-52833 7.7

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Record
EUVD-2022-52833
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-cfgc-fgg8-p3qf 7.8

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called...

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Record
GHSA-cfgc-fgg8-p3qf
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-59
Updated
2026-11-02
NVD 7.7

A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.

Record
CVE-2022-31256
CVSS 3.1
7.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-59
Updated
2026-11-02
OSVSUSE-SU-2022:3898-1 No score

Security update for sendmail

This update for sendmail fixes the following issues:

  • CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
Record
SUSE-SU-2022:3898-1
Updated
2026-11-02
OSVSUSE-SU-2022:3899-1 No score

Security update for sendmail

This update for sendmail fixes the following issues:

  • CVE-2022-31256: Fixed mail to root privilege escalation via sm-client.pre script (bsc#1204696, bsc#1202937).
Record
SUSE-SU-2022:3899-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sendmail
SUSE:Linux Enterprise Module for Legacy 12
 before 8.14.9-4.6.1
8.14.9-4.6.1
sendmail
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Module for Package Hub 15 SP3
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
Show 16 moreShow less
Affected packages
PackageAffectedFixed
sendmail
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server 15-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server for SAP Applications 15
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Manager Proxy 4.1
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Manager Retail Branch Server 4.1
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Manager Server 4.1
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Enterprise Storage 6
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
SUSE:Enterprise Storage 7
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
openSUSE:Leap 15.3
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1
sendmail
openSUSE:Leap 15.4
 before 8.15.2-150000.8.9.1
8.15.2-150000.8.9.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-31256 is a high vulnerability (CVSS 7.7) in Opensuse Factory, published October 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in sendmail 8.14.9-4.6.1.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open