{"id":"CVE-2022-1348","aliases":["ALPINE-CVE-2022-1348","ALSA-2022:8393","AZL-9845","BELL-CVE-2022-1348","DEBIAN-CVE-2022-1348","EUVD-2022-24670","GHSA-4c4j-w8hm-rjgv","MGASA-2022-0217","OESA-2022-1724","RHSA-2022:8393","RLSA-2022:8393","SUSE-SU-2022:2396-1","UBUNTU-CVE-2022-1348","USN-5447-1","openSUSE-SU-2024:12108-1"],"status":"published","title":"A vulnerability was found in logrotate in how the state file is created. The state file is used...","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01677,"percentile":0.77191,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2022-05-25T00:00:00Z","modified":"2026-10-29T11:30:44Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"logrotate","fixed_in":["3.18.0-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"logrotate","fixed_in":["3.18.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"logrotate","fixed_in":["3.18.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"logrotate","fixed_in":["3.19.0-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"logrotate","fixed_in":["3.20.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"logrotate","fixed_in":["3.18.0-7.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"logrotate","fixed_in":["3.20.1-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"logrotate","fixed_in":["3.20.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"logrotate","fixed_in":["3.20.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"logrotate","fixed_in":["3.20.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"logrotate","fixed_in":["3.17.0-3.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"logrotate","fixed_in":["3.20.1-1.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate","fixed_in":["0:3.18.0-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate-debuginfo","fixed_in":["0:3.18.0-7.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate-debugsource","fixed_in":["0:3.18.0-7.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"logrotate","fixed_in":["0:3.18.0-7.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"logrotate","fixed_in":["3.18.1-150400.3.7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"logrotate","fixed_in":["3.18.1-150400.3.7.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"logrotate","fixed_in":["3.19.0-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"logrotate","fixed_in":["3.20.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.18.0-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.18.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.18.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.19.0-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.17.0"},{"fixed":"3.20.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.0-7.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.17.0-3.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-7.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"logrotate-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-7.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0-7.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-150400.3.7.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.18.1-150400.3.7.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-1ubuntu1.1"}]}],"versions":["3.18.0-2ubuntu1","3.18.0-2ubuntu2","3.18.1-2ubuntu1","3.19.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.19.0-1ubuntu1.1"}]}],"versions":["3.18.0-2ubuntu1","3.18.0-2ubuntu2","3.18.1-2ubuntu1","3.19.0-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"logrotate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20.1-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"logrotate_project","product":"logrotate"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/25/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/25/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/25/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1348","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR"},{"url":"https://github.com/advisories/GHSA-4c4j-w8hm-rjgv"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1348","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8393","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1348","tags":["report"]},{"url":"https://bugzilla.redhat.com/2075074","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8393.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-1348","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1348.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1348","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0217.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30473","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/05/25/3","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/05/25/5","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5447-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1724","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2075074","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8393.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1348","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8393","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222396-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192449","tags":["report"]},{"url":"https://bugzilla.suse.com/1199652","tags":["report"]},{"url":"https://bugzilla.suse.com/1200278","tags":["report"]},{"url":"https://bugzilla.suse.com/1200802","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1348","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-1348","tags":["report"]},{"url":"https://github.com/logrotate/logrotate/blame/master/logrotate.c#L3015-L3017","tags":["report"]},{"url":"https://github.com/logrotate/logrotate/commit/f46d0bdfc9c53515c13880c501f4d2e1e7dd8b25","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T15:13:39Z","modified":"2025-06-09T14:55:12.017Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-732","CWE-732"],"updated_at":"2026-11-02T14:34:38.581997Z"}],"euvd":[{"id":"EUVD-2022-24670","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T15:13:39Z","modified":"2025-06-09T14:55:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:27.753525Z"}],"ghsa":[{"id":"GHSA-4c4j-w8hm-rjgv","title":"A vulnerability was found in logrotate in how the state file is created. The state file is used...","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-26T00:01:09Z","modified":"2025-06-09T15:32:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T15:02:37.765114Z"}],"nvd":[{"id":"CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T16:15:08.15Z","modified":"2026-06-17T04:22:15.87Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:07:21.261605Z"}],"osv":[{"id":"ALPINE-CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T16:15:08.15Z","modified":"2026-11-03T07:18:33.034457034Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9845","title":"CVE-2022-1348 affecting package logrotate for versions less than 3.20.1-1","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T16:15:08Z","modified":"2026-04-21T04:35:09.323354Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2022-1348","title":"CVE-2022-1348 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:51.118202Z","modified":"2026-01-26T09:49:01.648987Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T15:13:39Z","modified":"2026-10-28T02:30:35.080621382Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DEBIAN-CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T16:15:08.15Z","modified":"2026-11-03T08:00:58.184422711Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1724","title":"logrotate security update","description":"The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files.  Logrotate allows for the automatic rotation compression, removal and mailing of log files.logrotate  Logrotate can be set to handle a log file daily, weekly, monthly or when the log file gets to a certain size.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.(CVE-2022-1348)","status":"published","published":"2022-06-24T11:04:59Z","modified":"2026-08-18T01:16:18.610535918Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:8393","title":"Red Hat Security Advisory: logrotate security update","status":"published","published":"2024-09-16T08:41:43Z","modified":"2025-11-22T12:41:27Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:8393","title":"Moderate: logrotate security update","description":"The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing.\n\nSecurity Fix(es):\n\n* logrotate: potential DoS from unprivileged users via the state file (CVE-2022-1348)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:23:14Z","modified":"2026-02-05T11:00:05.223446Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1348","description":"A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.","status":"published","published":"2022-05-25T00:00:00Z","modified":"2026-02-04T03:15:38.558553Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:8393","title":"Moderate: logrotate security update","description":"The logrotate utility simplifies the administration of multiple log files by allowing their automatic rotation, compression, removal, and mailing.\n\nSecurity Fix(es):\n\n* logrotate: potential DoS from unprivileged users via the state file (CVE-2022-1348)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:30:44.166910193Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"MGASA-2022-0217","title":"Updated logrotate packages fix security vulnerability","description":"A vulnerability was found in logrotate in how the state file is created.\nThe state file is used to prevent parallel executions of multiple instances\nof logrotate by acquiring and releasing a file lock. When the state file\ndoes not exist, it is created with world-readable permission, allowing an\nunprivileged user to lock the state file, stopping any rotation. This flaw\naffects logrotate versions before 3.20.0. (CVE-2022-1348)\nNote the change in permission does not apply until the first time logrotate\nruns after installing the update.\n","status":"published","published":"2022-06-03T17:15:11Z","modified":"2026-04-16T04:42:14.11311384Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12108-1","title":"logrotate-3.20.1-1.1 on GA media","description":"These are all security issues fixed in the logrotate-3.20.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:25:49.582211Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2396-1","title":"Security update for logrotate","description":"This update for logrotate fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2022-1348: Fixed insecure permissions for state file creation (bsc#1199652).\n- Improved coredump handing for SUID binaries (bsc#1192449).\n\nNon-security issues fixed:\n\n- Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802).\n","status":"published","published":"2022-07-14T09:58:05Z","modified":"2026-02-04T02:35:04.765456Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5447-1","title":"logrotate vulnerability","description":"It was discovered that logrotate incorrectly handled the state file. A\nlocal attacker could possibly use this issue to keep a lock on the state\nfile and cause logrotate to stop working, leading to a denial of service.\n","status":"published","published":"2022-05-26T11:51:24Z","modified":"2026-02-10T04:42:38Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}