Vulnerability · Published Sep 21, 2022 · Assigned by fedora

CVE-2022-29799

Medium 5.5

In plain English

A medium-severity path traversal in networkd-dispatcher. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 11.8% (higher than 96% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)11.8%top 3.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Public PoC

Official description

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	networkd-dispatcher	2.2.3-1	DEBIAN-CVE-2022-29799
Debian:13	networkd-dispatcher	2.2.3-1	DEBIAN-CVE-2022-29799
Debian:14	networkd-dispatcher	2.2.3-1	DEBIAN-CVE-2022-29799
Ubuntu:22.04:LTS	networkd-dispatcher	2.1-2ubuntu0.22.04.1	USN-5395-1
Ubuntu:22.04:LTS	networkd-dispatcher	2.1-2ubuntu0.22.04.2	UBUNTU-CVE-2022-29799

Affected products (as reported)

Vendor	Product	Versions
n/a	networkd-dispatcher	uknown

Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/ x_refsource_MISC