CVE-2022-23220

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu, Debian, and Gentoo.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2022/01/22/1Mailing List, Third Party Advisory
https://github.com/gregkh/usbview/commit/bf374fa4e5b9a756789dfd88efa93806a395463bPatch, Third Party Advisory
https://security.gentoo.org/glsa/202310-15Third Party Advisory
https://www.debian.org/security/2022/dsa-5052Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/01/21/1Exploit, Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/01/22/1Mailing List, Third Party Advisory
https://github.com/gregkh/usbview/commit/bf374fa4e5b9a756789dfd88efa93806a395463bPatch, Third Party Advisory
https://security.gentoo.org/glsa/202310-15Third Party Advisory
https://www.debian.org/security/2022/dsa-5052Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/01/21/1Exploit, Mailing List, Patch, Third Party Advisory

Timeline

Published: Jan 21, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-232219.8H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTING CVE-2022-232227.8kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arith CVE-2022-232237.5On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade CVE-2022-232279.8NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users CVE-2022-232287.5Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily CVE-2022-23238.8Improper neutralization of special elements used in a user input allows an authenticated malicious user to perform remote code execution in CVE-2022-232324.9StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited co CVE-2022-232337.5StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when successfully exploited co CVE-2022-232345.5SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext H CVE-2022-232355.3Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which CVE-2022-232364.4E-Series SANtricity OS Controller Software versions 11.40 through 11.70.2 store the LDAP BIND password in plaintext within a file accessible CVE-2022-232376.1E-Series SANtricity OS Controller Software 11.x versions through 11.70.2 are vulnerable to host header injection attacks that could allow an