Race Condition Vulnerability in Network Dispatcher by Linux Vendor
CVE-2022-29800

4.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Networkd-dispatcher
Vendor
CVE Published:
21 September 2022

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-29800?

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was identified in networkd-dispatcher, a component of Linux systems. This vulnerability arises from the interval between script discovery and execution, allowing an attacker to substitute malicious scripts for legitimate ones recognized by networkd-dispatcher as owned by root. Consequently, this flaw can lead to unauthorized script execution and potentially escalate privileges. Users of the affected product are urged to apply available patches and updates to mitigate the risk.

Affected Version(s)

networkd-dispatcher uknown

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

nimbuspwn-CVE-2022-29800-CVE-2022-29799
Created by ngtuonghung

References

https://www.microsoft.com/security/blog/2022/04/26/micros...
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.