CVE catalog

CVE-2022-29527

amazon-ssm-agent-3.1.1260.0-1.1 on GA media

[CVE catalog]

Severity
High · CVSS 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.30% · Oct 25, 2026

This update for amazon-ssm-agent fixes the following issues: - Update to version 3.1.1260.0 - CVE-2022-29527: Fixed a bug which creates world-writable sudoers file during runtime. (bsc#1196556)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Suseamazon-ssm-agentlinux enterprise module for public cloud 123.1.1260.0-4.27.2fixed
Suseamazon-ssm-agentlinux enterprise module for public cloud 153.1.1260.0-150000.5.9.2fixed
Suseamazon-ssm-agentlinux enterprise module for public cloud 15 sp13.1.1260.0-150000.5.9.2fixed
Suseamazon-ssm-agentlinux enterprise module for public cloud 15 sp23.1.1260.0-150000.5.9.2fixed
Suseamazon-ssm-agentlinux enterprise module for public cloud 15 sp33.1.1260.0-150000.5.9.2fixed
Opensuseamazon-ssm-agentleap 15.33.1.1260.0-150000.5.9.2fixed
Opensuseamazon-ssm-agentleap 15.43.1.1260.0-150000.5.9.2fixed
Opensuseamazon-ssm-agenttumbleweed3.1.1260.0-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Suseamazon-ssm-agentrpmlinux enterprise module for public cloud 123.1.1260.0-4.27.2Not reportedSUSE-SU-2022:3654-1Not reported
Suseamazon-ssm-agentrpmlinux enterprise module for public cloud 153.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Suseamazon-ssm-agentrpmlinux enterprise module for public cloud 15 sp13.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Suseamazon-ssm-agentrpmlinux enterprise module for public cloud 15 sp23.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Suseamazon-ssm-agentrpmlinux enterprise module for public cloud 15 sp33.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Opensuseamazon-ssm-agentrpmleap 15.33.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Opensuseamazon-ssm-agentrpmleap 15.43.1.1260.0-150000.5.9.2Not reportedSUSE-SU-2022:1510-1Not reported
Opensuseamazon-ssm-agentrpmtumbleweed3.1.1260.0-1.1Not reportedOPENSUSE-SU-2024:12012-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [amazon-ssm-agent]Fixed

    Source package: [amazon-ssm-agent]

    Details (1)

    • 3.3.4851.0-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 3.1.1260.0-1.1

      pypi · amazon-ssm-agent · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]