Lucene search

K
osvGoogleOSV:USN-5395-2
HistoryMay 04, 2022 - 5:28 p.m.

networkd-dispatcher regression

2022-05-0417:28:07
Google
osv.dev
9
networkd-dispatcher
regression
vulnerabilities
incomplete update
race condition
escalate privileges
arbitrary code
software

AI Score

8

Confidence

Low

EPSS

0.001

Percentile

25.9%

USN-5395-1 fixed vulnerabilities in networkd-dispatcher. Unfortunately
that update was incomplete and could introduce a regression. This update
fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that networkd-dispatcher incorrectly handled internal
scripts. A local attacker could possibly use this issue to cause a race
condition, escalate privileges and execute arbitrary code.
(CVE-2022-29799, CVE-2022-29800)