Privilege Escalation Vulnerability in FRRouting by FRR

CVE-2022-42917

What is CVE-2022-42917?

In versions of FRRouting prior to 8.5, a privilege escalation vulnerability exists that allows the service user (commonly frr) to gain root privileges. This is achieved by monitoring the configuration directory (/etc/frr), enabling the user to replace configuration files upon creation using symlinks. This manipulation can potentially alter the ownership of arbitrary system files due to a Time-of-Check to Time-of-Use (TOCTOU) race condition resulting from improper handling of file operations like touch and chown.

References