CVE-2022-30688

Katalog CVE

CVSS 7.8 · High EPSS 0,39%

Kerentanan pada needrestart project needrestart, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

Rincian

Terbit di NVD

17 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/liske/needrestart/commit/e6e58136e1e3c92296e2e810cb8372a5fe0dbd30 patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2022/05/17/9 mailing list · advisory pihak ketiga
• https://github.com/liske/needrestart/releases/tag/v3.6 release notes · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/05/msg00024.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-security-announce/2022/msg00105.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5137 advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2022/05/17/9 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Nov/15
• http://seclists.org/fulldisclosure/2024/Nov/17