Every CVE Search/ Get API key

CVE-2022-37706

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it...

7.8 HighPublic exploitFix available

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

6.01%Down 0.5 points since Dec 26, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
CVE-2022-37706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
CVE List 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
CVE-2022-37706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
EUVDEUVD-2022-40320 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
EUVD-2022-40320
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j268-37pf-rvx9 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it...

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
GHSA-j268-37pf-rvx9
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
OSV 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
CVE-2022-37706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-37706 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
DEBIAN-CVE-2022-37706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 5 moreShow less
OSVUBUNTU-CVE-2022-37706 7.8

enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

Record
UBUNTU-CVE-2022-37706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
OSVMGASA-2022-0360 No score

Updated enlightenment packages fix security vulnerability

Updated enlightenment package to fix the security vulnerability, CVE-2022-37706 that would allow an user to gain root privileges.

Record
MGASA-2022-0360
Updated
2026-11-02
OSVopenSUSE-SU-2022:10153-1 No score

Security update for enlightenment

This update for enlightenment fixes the following issues:

Update to 0.25.4 Bugfix release

  • Fix shape handling in various cases that affected apps with shaped input
  • Fix procstats popup and dangling icon for fullscreen windows
  • Fix a vianishing pointer in some cases
  • Workaround Qt issue where it does not remove WM_STATE on withdraw
  • Fix fullscreen focus toggle flicker
  • Fix pointer sticking case
  • Fix tap-to-click props
  • Fix gadgcon disabled items
  • Fix config fallback handling that means no fallback happened
  • Fix gtk frame prop handling
  • Fix first map handling that affected energyxt
  • Fix CVE-2022-37706 (boo#1203631)
  • Harden enlightenment_sys when mis-packaged without sysactions.conf
Record
openSUSE-SU-2022:10153-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12365-1 No score

enlightenment-0.25.4-1.1 on GA media

These are all security issues fixed in the enlightenment-0.25.4-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12365-1
Updated
2026-11-02
OSVUSN-8981-1 No score

e17 vulnerability

It was discovered that the enlightenment_sys helper in Enlightenment incorrectly handled certain pathnames. A local attacker could possibly use this issue to gain administrator privileges.

Record
USN-8981-1
Updated
2026-11-04

Affected products

Affected packages

Affected packages
PackageAffectedFixed
e17
Debian:12
 before 0.25.4-1
0.25.4-1
e17
Debian:13
 before 0.25.4-1
0.25.4-1
e17
Debian:14
 before 0.25.4-1
0.25.4-1
e17
Debian:10
 before 0.22.4-2+deb10u1, plus listed versions
0.22.4-2
0.22.4-2+deb10u1
e17
Debian:11
 before 0.24.2-8+deb11u1, plus listed versions
0.24.2-8
0.24.2-8+deb11u1
enlightenment
Mageia:8
 before 0.24.2-2.1.mga8
0.24.2-2.1.mga8
e17
Ubuntu:Pro:16.04:LTS
 before 0.17.6-1ubuntu0.1~esm1, plus listed versions
0.17.6-1
0.17.6-1ubuntu0.1~esm1
e17
Ubuntu:Pro:18.04:LTS
 before 0.17.6-1.1ubuntu0.1~esm1, plus listed versions
0.17.6-1.1
0.17.6-1.1ubuntu0.1~esm1
e17
Ubuntu:Pro:20.04:LTS
 before 0.23.1-4ubuntu0.1~esm1, plus listed versions
0.22.4-20.23.1-4
0.23.1-4ubuntu0.1~esm1
e17
Ubuntu:Pro:22.04:LTS
 before 0.25.3-1ubuntu0.1~esm1, plus listed versions
0.24.2-80.25.1-10.25.3-1
0.25.3-1ubuntu0.1~esm1
e17
Ubuntu:25.10
 All versions, plus listed versions
0.27.1-1
 None known
enlightenment
SUSE:Package Hub 15 SP4
 before 0.25.4-bp154.4.3.1
0.25.4-bp154.4.3.1
enlightenment
openSUSE:Leap 15.4
 before 0.25.4-bp154.4.3.1
0.25.4-bp154.4.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubMaherAzzouzi/CVE-2022-37706-LPE-exploit2022-09-12
MetasploitUbuntu Enlightenment Mount Priv Esc2022-09-13
PoC in GitHubECU-10525611-Xander/CVE-2022-377062022-09-18
Exploit-DBEnlightenment v0.25.3 - Privilege escalation2023-04-01
PoC in GitHubjunnythemarksman/CVE-2022-377062024-06-03
PoC in GitHubTACTICAL-HACK/CVE-2022-37706-SUID2024-07-19
PoC in GitHubsanan2004/CVE-2022-377062024-08-18
PoC in GitHubKaoXx/CVE-2022-377062024-09-10
PoC in GitHubd3ndr1t30x/CVE-2022-377062024-12-10
PoC in GitHubMassive43/CVE-2022-377062026-06-24

History

History
RecordedChangedSources
affected, aliases, referencesOSV
affected, factsOSV
exploitsOSV
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-37706 is a high vulnerability (CVSS 7.8) in Enlightenment, published September 19, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.01%, the 93rd percentile. Fixed in e17 0.25.4-1.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open