CVE-2022-42917
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root...
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
CVE-2022-42917- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
EUVDEUVD-2022-56059
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
EUVD-2022-56059- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x36x-qpcf-qwfj
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root...
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
GHSA-x36x-qpcf-qwfj- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
NVD
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
CVE-2022-42917- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
OSV
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
CVE-2022-42917- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-367
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-42917
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
UBUNTU-CVE-2022-42917- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSVDEBIAN-CVE-2022-42917 No score
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
- Record
DEBIAN-CVE-2022-42917- Updated
- 2026-11-03
OSVopenSUSE-SU-2024:12516-1 No score
frr-8.4-1.1 on GA media
These are all security issues fixed in the frr-8.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12516-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:4130-1 No score
Security update for frr
This update for frr fixes the following issues:
- CVE-2022-37035: Fixed a possible use-after-free due to a race condition related to bgp_notify_send_with_data() and bgp_process_packet() (bsc#1202085).
- CVE-2022-42917: Fixed a privilege escalation from frr to root in frr config creation (bsc#1204124).
- Record
SUSE-SU-2022:4130-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
frrDebian:12 |
before 8.4.1-1 | 8.4.1-1 |
frrDebian:13 |
before 8.4.1-1 | 8.4.1-1 |
frrDebian:14 |
before 8.4.1-1 | 8.4.1-1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP3 From an advisory covering 2 CVEs |
before 7.4-150300.4.10.1 | 7.4-150300.4.10.1 |
frrSUSE:Linux Enterprise Module for Server Applications 15 SP4 From an advisory covering 2 CVEs |
before 7.4-150300.4.10.1 | 7.4-150300.4.10.1 |
frropenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 7.4-150300.4.10.1 | 7.4-150300.4.10.1 |
frropenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 7.4-150300.4.10.1 | 7.4-150300.4.10.1 |
quaggaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 0.99.24.1-20.99.24.1-2ubuntu10.99.24.1-2ubuntu1.10.99.24.1-2ubuntu1.20.99.24.1-2ubuntu1.30.99.24.1-2ubuntu1.40.99.24.1-2ubuntu1.4+esm1 |
None known |
quaggaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.1.1-31.1.1-3ubuntu11.2.2-11.2.2-1ubuntu11.2.4-11.2.4-1ubuntu0.1~esm11.2.4-1ubuntu0.1~esm2 |
None known |
quaggaUbuntu:20.04:LTS |
All versions, plus listed versions 1.2.4-4build11.2.4-4ubuntu0.11.2.4-4ubuntu0.41.2.4-4ubuntu0.5 |
None known |
frrUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 6.0.2-2build27.2-1ubuntu17.2-1ubuntu27.2.1-17.2.1-1ubuntu0.1 Show 6 moreShow less7.2.1-1ubuntu0.27.2.1-1ubuntu0.2+esm17.2.1-1ubuntu0.2+esm27.2.1-1ubuntu0.2+esm37.2.1-1ubuntu0.2+esm47.2.1-1ubuntu0.2+esm5 |
None known |
frrUbuntu:22.04:LTS |
All versions, plus listed versions 7.5.1-1.18.1-18.1-1ubuntu18.1-1ubuntu1.18.1-1ubuntu1.2 Show 14 moreShow less8.1-1ubuntu1.38.1-1ubuntu1.48.1-1ubuntu1.58.1-1ubuntu1.68.1-1ubuntu1.78.1-1ubuntu1.88.1-1ubuntu1.98.1-1ubuntu1.108.1-1ubuntu1.118.1-1ubuntu1.138.1-1ubuntu1.148.1-1ubuntu1.158.1-1ubuntu1.168.1-1ubuntu1.17 |
None known |
frropenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 8.4-1.1 | 8.4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-42917 is a medium vulnerability (CVSS 6.7) in Frrouting, published November 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 1st percentile. Fixed in frr 8.4.1-1.
References
bugzilla.suse.com/show_bug.cgi?id=1204124
frrouting.org/security/cve-2022-42917
github.com/FRRouting/frr/commit/972cdc560e339d70c0ee5fb70ec636ab78f00bca
nvd.nist.gov/vuln/detail/CVE-2022-42917
Show 9 moreShow less
security-tracker.debian.org/tracker/CVE-2022-42917
suse.com/support/update/announcement/2022/suse-su-20224130-1
ubuntu.com/security/CVE-2022-42917
cve.org/CVERecord?id=CVE-2022-42917