Race Condition Vulnerability in Network Dispatcher by Linux Vendor
CVE-2022-29800

4.7MEDIUM

Key Information:

Vendor

Microsoft
Status
Networkd-dispatcher
Vendor
CVE Published:
21 September 2022

What is CVE-2022-29800?

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was identified in networkd-dispatcher, a component of Linux systems. This vulnerability arises from the interval between script discovery and execution, allowing an attacker to substitute malicious scripts for legitimate ones recognized by networkd-dispatcher as owned by root. Consequently, this flaw can lead to unauthorized script execution and potentially escalate privileges. Users of the affected product are urged to apply available patches and updates to mitigate the risk.

Affected Version(s)

networkd-dispatcher uknown

References

https://www.microsoft.com/security/blog/2022/04/26/micros...
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.