Vulnerabilities > CVE-2022-42717 - Unspecified vulnerability in Hashicorp Vagrant

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

hashicorp

NVD

Published: 2022-10-11

Updated: 2023-08-08

Summary

An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.

Vulnerable Configurations

Part	Description	Count
Application	Hashicorp Hashicorp Vagrant 0.1.0 Hashicorp Vagrant 0.1.1 Hashicorp Vagrant 0.1.2 Hashicorp Vagrant 0.1.3 Hashicorp Vagrant 0.1.4 Hashicorp Vagrant 0.2.0 Hashicorp Vagrant 0.3.0 Hashicorp Vagrant 0.3.1 Hashicorp Vagrant 0.3.2 Hashicorp Vagrant 0.3.3 Hashicorp Vagrant 0.3.4 Hashicorp Vagrant 0.4.0 Hashicorp Vagrant 0.4.1 Hashicorp Vagrant 0.4.2 Hashicorp Vagrant 0.5.0 Hashicorp Vagrant 0.5.1 Hashicorp Vagrant 0.5.2 Hashicorp Vagrant 0.5.3 Hashicorp Vagrant 0.5.4 Hashicorp Vagrant 0.6.0 Hashicorp Vagrant 0.6.1 Hashicorp Vagrant 0.6.2 Hashicorp Vagrant 0.6.3 Hashicorp Vagrant 0.6.4 Hashicorp Vagrant 0.6.5 Hashicorp Vagrant 0.6.6 Hashicorp Vagrant 0.6.7 Hashicorp Vagrant 0.6.8 Hashicorp Vagrant 0.6.9 Hashicorp Vagrant 0.7.0 Hashicorp Vagrant 0.7.1 Hashicorp Vagrant 0.7.2 Hashicorp Vagrant 0.7.3 Hashicorp Vagrant 0.7.4 Hashicorp Vagrant 0.7.5 Hashicorp Vagrant 0.7.6 Hashicorp Vagrant 0.7.7 Hashicorp Vagrant 0.7.8 Hashicorp Vagrant 0.8.0 Hashicorp Vagrant 0.8.1 Hashicorp Vagrant 0.8.2 Hashicorp Vagrant 0.8.3 Hashicorp Vagrant 0.8.4 Hashicorp Vagrant 0.8.5 Hashicorp Vagrant 0.8.6 Hashicorp Vagrant 0.8.7 Hashicorp Vagrant 0.8.8 Hashicorp Vagrant 0.8.9 Hashicorp Vagrant 0.8.10 Hashicorp Vagrant 0.9.0 Hashicorp Vagrant 0.9.1 Hashicorp Vagrant 0.9.2 Hashicorp Vagrant 0.9.3 Hashicorp Vagrant 0.9.4 Hashicorp Vagrant 0.9.5 Hashicorp Vagrant 0.9.6 Hashicorp Vagrant 0.9.7 Hashicorp Vagrant 1.0.0 Hashicorp Vagrant 1.0.1 Hashicorp Vagrant 1.0.2 Hashicorp Vagrant 1.0.3 Hashicorp Vagrant 1.0.4 Hashicorp Vagrant 1.0.5 Hashicorp Vagrant 1.0.6 Hashicorp Vagrant 1.0.7 Hashicorp Vagrant 1.1.0 Hashicorp Vagrant 1.1.1 Hashicorp Vagrant 1.1.2 Hashicorp Vagrant 1.1.3 Hashicorp Vagrant 1.1.4 Hashicorp Vagrant 1.1.5 Hashicorp Vagrant 1.2.0 Hashicorp Vagrant 1.2.1 Hashicorp Vagrant 1.2.2 Hashicorp Vagrant 1.2.3 Hashicorp Vagrant 1.2.4 Hashicorp Vagrant 1.2.5 Hashicorp Vagrant 1.2.6 Hashicorp Vagrant 1.2.7 Hashicorp Vagrant 1.3.0 Hashicorp Vagrant 1.3.1 Hashicorp Vagrant 1.3.2 Hashicorp Vagrant 1.3.3 Hashicorp Vagrant 1.3.4 Hashicorp Vagrant 1.3.5 Hashicorp Vagrant 1.4.0 Hashicorp Vagrant 1.4.1 Hashicorp Vagrant 1.4.2 Hashicorp Vagrant 1.4.3 Hashicorp Vagrant 1.5.0 Hashicorp Vagrant 1.5.1 Hashicorp Vagrant 1.5.2 Hashicorp Vagrant 1.5.3 Hashicorp Vagrant 1.5.4 Hashicorp Vagrant 1.6.0 Hashicorp Vagrant 1.6.1 Hashicorp Vagrant 1.6.2 Hashicorp Vagrant 1.6.3 Hashicorp Vagrant 1.6.4 Hashicorp Vagrant 1.6.5 Hashicorp Vagrant 1.7.0 Hashicorp Vagrant 1.7.1 Hashicorp Vagrant 1.7.2 Hashicorp Vagrant 1.7.3 Hashicorp Vagrant 1.7.4 Hashicorp Vagrant 1.8.0 Hashicorp Vagrant 1.8.1 Hashicorp Vagrant 1.8.3 Hashicorp Vagrant 1.8.4 Hashicorp Vagrant 1.8.5 Hashicorp Vagrant 1.8.6 Hashicorp Vagrant 1.8.7 Hashicorp Vagrant 1.9.0 Hashicorp Vagrant 1.9.1 Hashicorp Vagrant 1.9.2 Hashicorp Vagrant 1.9.3 Hashicorp Vagrant 1.9.4 Hashicorp Vagrant 1.9.5 Hashicorp Vagrant 1.9.6 Hashicorp Vagrant 1.9.7 Hashicorp Vagrant 1.9.8 Hashicorp Vagrant 2.0.0 Hashicorp Vagrant 2.0.1 Hashicorp Vagrant 2.0.2 Hashicorp Vagrant 2.0.3 Hashicorp Vagrant 2.0.4 Hashicorp Vagrant 2.1.0 Hashicorp Vagrant 2.1.1 Hashicorp Vagrant 2.1.2 Hashicorp Vagrant 2.1.3 Hashicorp Vagrant 2.1.4 Hashicorp Vagrant 2.1.5 Hashicorp Vagrant 2.2.0 Hashicorp Vagrant 2.2.1 Hashicorp Vagrant 2.2.2 Hashicorp Vagrant 2.2.3 Hashicorp Vagrant 2.2.4 Hashicorp Vagrant 2.2.5 Hashicorp Vagrant 2.2.6 Hashicorp Vagrant 2.2.7 Hashicorp Vagrant 2.2.8 Hashicorp Vagrant 2.2.9 Hashicorp Vagrant 2.2.10 Hashicorp Vagrant 2.2.11 Hashicorp Vagrant 2.2.12 Hashicorp Vagrant 2.2.13 Hashicorp Vagrant 2.2.14 Hashicorp Vagrant 2.2.15 Hashicorp Vagrant 2.2.16 Hashicorp Vagrant 2.2.17 Hashicorp Vagrant 2.2.18 Hashicorp Vagrant 2.2.19 Hashicorp Vagrant 2.3.0	155
OS	Linux Linux Linux Kernel -	1

Summary

Vulnerable Configurations

References