Skip to content
OpenAdvisories
Unscored USN-5584-1 1 CVE

schroot vulnerability

Published Aug 29, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Schroot incorrectly handled certain Schroot names.
An attacker could possibly use this issue to break schroot's internal
state causing a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS schroot 1.6.10-4ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS schroot 1.6.10-9ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS schroot 1.6.10-12ubuntu3.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS schroot 1.6.10-1ubuntu3+esm1

Vulnerabilities 1

  • Unscored —
    CVE-2022-2787

    stricter rules on chroot names

    Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

    Debian schroot schroot schroot Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-2787