Local Privilege Escalation Vulnerability in Hashicorp Packer on Linux

CVE-2022-42717

What is CVE-2022-42717?

An issue in Hashicorp Packer prior to version 2.3.1 allows local privilege escalation through an insecure sudoers configuration for Vagrant on Linux. When a host is set up according to the recommended documentation, non-privileged users may exploit a wildcard in the sudoers file to execute arbitrary commands as the root user. This vulnerability underscores the need for careful review of the sudoers configuration to prevent unauthorized access and control.

References