VDB
CVE-2022-42917
CVE-2022-42917
PUBLISHED
CVSS 6.7 MEDIUM
Reported by mitre · Published September 13, 2026
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.
Risk Scores
CVSS 3.1
6.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| FRRouting | FRRouting | 0 |
| frrouting | frrouting | 0 |
| FRRouting | FRRouting | 0 |
Timeline
- Nov 18, 2022 CVE Published
- Sep 14, 2026 EPSS Score
- Sep 15, 2026 CVE Updated
- Sep 24, 2026 EPSS Score
- Oct 7, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 25, 2026 EPSS Score