Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-42717
7.8
HIGHCVSS v3
Published
October 11, 2022
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.
hashicorp/vagrant
GitHubVagrant is a tool for building and distributing development environments.
GitHubVagrant is a tool for building and distributing development environments.< 2.3.1NVD
hashicorp/packerGitHubPacker is a tool for creating identical machine images for multiple platforms from a single source configuration.
GitHubPacker is a tool for creating identical machine images for multiple platforms from a single source configuration.= *NVD