CVE-2022-3008
CVSS V2 None
CVSS V3 High 8.8
Description
The tinygltf library uses the C library function wordexp() to perform file path expansion on untrusted paths that are provided from the input file. This function allows for command injection by using backticks. An attacker could craft an untrusted path input that would result in a path expansion. We recommend upgrading to 2.6.0 or past commit 52ff00a38447f06a17eab1caa2cf0730a119c751
Overview
- CVE ID
- CVE-2022-3008
- Assigner
- cve-coordination@google.com
- Vulnerability Status
- Analyzed
- Published Version
- 2022-09-05T09:15:10
- Last Modified Date
- 2022-10-01T02:17:27
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:tinygltf_project:tinygltf:*:*:*:*:*:*:*:* | 1 | OR | 2.6.0 | |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 1 | OR |
CVSS Version 3
- Version
- 3.1
- Vector String
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Attack Vector
- NETWORK
- Attack Compatibility
- LOW
- Privileges Required
- NONE
- User Interaction
- REQUIRED
- Scope
- UNCHANGED
- Confidentiality Impact
- HIGH
- Availability Impact
- HIGH
- Base Score
- 8.8
- Base Severity
- HIGH
- Exploitability Score
- 2.8
- Impact Score
- 5.9
References
| Reference URL | Reference Tags |
|---|---|
| https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49053 | Exploit Issue Tracking Mailing List Third Party Advisory |
| https://github.com/syoyo/tinygltf/blob/master/README.md | Product Third Party Advisory |
| https://github.com/syoyo/tinygltf/commit/52ff00a38447f06a17eab1caa2cf0730a119c751 | Patch Third Party Advisory |
| https://github.com/syoyo/tinygltf/issues/368 | Exploit Issue Tracking Patch Third Party Advisory |
| https://www.debian.org/security/2022/dsa-5232 | Third Party Advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-3008 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3008 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-09-05 10:00:08 | Added to TrackCVE |