Summary
It was discovered that networkd-dispatcher incorrectly handled internal
scripts. A local attacker could possibly use this issue to cause a race
condition, escalate privileges and execute arbitrary code.
(CVE-2022-29799, CVE-2022-29800)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | networkd-dispatcher | 1.7-0ubuntu3.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | networkd-dispatcher | 2.1-2~ubuntu20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | networkd-dispatcher | 2.1-2ubuntu0.22.04.1 |
Vulnerabilities 2
-
Medium 5.5
A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the Operationa…
-
Medium 4.7CVE-2022-29800 Public exploit
A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists be…