CVE-2022-30688: High severity needrestart vulnerability
needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-30688?
CVE-2022-30688 is a vulnerability in needrestart 0.8 through 3.5 before 3.6 that allows a local user to escalate privileges.
How does CVE-2022-30688 affect needrestart?
CVE-2022-30688 affects needrestart versions 0.8 through 3.5 before 3.6 by not anchoring the regexes used to detect the Perl, Python, and Ruby interpreters, allowing local privilege escalation.
Which software versions are affected by CVE-2022-30688?
needrestart versions 0.8 through 3.5 before 3.6, as well as Debian Linux versions 9.0, 10.0, and 11.0, are affected by CVE-2022-30688.
What is the severity of CVE-2022-30688?
CVE-2022-30688 has a severity score of 7.8, which is considered high.
How can I fix CVE-2022-30688?
To fix CVE-2022-30688, it is recommended to update to needrestart version 3.6 or higher.