CVE-2022-37393

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-37393
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37393.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-37393
Published
2022-08-16T20:15:07.860Z
Modified
2026-03-14T11:50:40.550636Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Zimbra's sudo configuration permits the zimbra user to execute the zmslapd binary as root with arbitrary parameters. As part of its intended functionality, zmslapd can load a user-defined configuration file, which includes plugins in the form of .so files, which also execute as root.

References

Affected packages

Git / github.com/zimbra/zm-build

Affected ranges

Type
GIT
Repo
https://github.com/zimbra/zm-build
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ecfce091cf6203d60de6b38f70570792a3877c08
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
55e7a144b223af47850cbba99d85bdb152f9c456
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a67f70f2fe3f77477a3145f7e6cdf1b0dfec1cfe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d7a9a8eb6b392c8ce79316f2da882fee58bf7ec1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c3c77b328a0d7d3bafecb79d202960217922ef0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
99ed312c10c45aa80e08be0c0ecbce46a53a4ace
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bb330ee01d1d1ddfe395bb31076ee6c480fa4a2e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0a0492165db06181b4005f3270d49785aa4d0a56
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d724bf5da689437fd184acf1a21d330addabd1fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e07f34625e1b88cd6e9f6d8a20b6b20eebb2cd44
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
249a291d29521096bd9ae5a3b51cdf1294c7ee5f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28ce94e00b4628d2f78772a1d43d90045f1d34d3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d077c8d575b8d2ea5ef93331958237b22e42e6f7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2705a9ca4782dcc4bea5f7d3653c2bf93f8582bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0867fcb7263fa9a1130b192d8c8538b05db4eee6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4a8e4bee73cd2c8e5804788ef5212d0d180f5846
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b0d4aa4baaf4d62a4858b390856771d30db3c37
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
58f5c7adeac0dc81b2286c1b948c97c134587bb9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f862bb6fb9bf2e77fbcea7ff62e92986c4044c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e4d1e657f1d2a5a5e8c56c11d7da34ef61574591
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7e67bbd1e09e5245a71b7936fa31f0106ee3b354
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
12157665dea3a952abb5b2b547f488a9cd438184
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e256f4211e29a2bb0d722d2cb5e6be537ff8aabf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5cc713152ec065dc0429473c1ec6c201d2de21ff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d7010a6f7044a10b5ed191dd2a4cf06d8feb8a47
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ab4e23100d69b12272dfb029880f53934d277697
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a12f6b5f02776dff1d0554a7998ae6c6ee0dd820
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5401294d39c5d8512e7d24bd2d10ebac76e2b04c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5401294d39c5d8512e7d24bd2d10ebac76e2b04c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5401294d39c5d8512e7d24bd2d10ebac76e2b04c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5401294d39c5d8512e7d24bd2d10ebac76e2b04c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d300abe9028aa3dc1bfe93a153a3b53ae27acf1d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5000d7ff7c8650dbfff91678647fabc2bbf0e64b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
14a4dfad173dbbe623229e1a850b7610c76bc280
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c613f97cd500f440236d39454da5e326d878000
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31312ceebfeba104e1e2a16c554e734125b911d1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
31312ceebfeba104e1e2a16c554e734125b911d1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
164407565a5f9d553a797411d8790fb0d75cfa10
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
175c0c7d2b795b80ca9065e1cd6de9178e28bafc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a3f5dae50fd9c34d9802c5fb2783dd130a600eff
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
469c6bac0eb78a7e6e7f97fb05d621164d2d6917
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
121e7596e9e89f1abd13692b5a285b9f6b70028d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac6081fa002b1511e926aba37740d2b6c20f3f43
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
29eea219faf34718f0ef1cda7c3f02c89910c96c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
71b1626efff0a90ba64ff3e5ab192683e6dccc9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
905970576d6fe337150f09c0ad7a0f53aa1a8f42
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5ae8f73501330bc788daed9c82c1222857d85b8b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe985a33cb83f82816a1e8f93d8d864112a6504e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7209ef3fd859fda5537cc7fbfdeb97cbd1ab931
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6c2b2cd41fa3625cbd1c12f4e14e07eece395a31
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3dbd48fe84d22132463b3758e3a40be19267fc9f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e40da921adb967639011de45841cef4c4601413
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de2eedbbdb8d58c34aac58dbf3866ae721f039eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5561a39cba0898c3bb5e188284d98f498d7a3c9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8a93da38fd1572d864c1becbcc772ba91ee4403
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
202d83762fca70b7403c144e1fedddc6cd4930a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a163a5dc09ec091fed86421118ec56c90384997a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b2faf1c074bf6e2f4f76acd11b9ad5a0b4caec40
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
03d99a16095b73a73770fbb6131d10234cfc13fd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bcb978ccc354d99d843725886083e321759b6765
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b20d016c829af1c0ffbaa0545c1deb96ccd5e2e5
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.7.11-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.8-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.8-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.8-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.8-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.8-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.9-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.10-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.11-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.12-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.12-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.12-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p33"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p34"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.8.15-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.0.0-p7\\.1"
        }
    ]
}

Affected versions

8.*
8.7.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-37393.json"