CVE-2022-30688: High severity Needrestart Project Needrestart vulnerability
needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/needrestartto a version that resolves this vulnerability.Fixed in 3.6-4+deb12u3Fixed in 3.11-1 - Upgrade
Upgrade
debian/needrestartto a version that resolves this vulnerability.Fixed in 3.6-1
Event History
Frequently Asked Questions
What is CVE-2022-30688?
CVE-2022-30688 is a vulnerability in needrestart 0.8 through 3.5 before 3.6 that allows a local user to escalate privileges.
How does CVE-2022-30688 affect needrestart?
CVE-2022-30688 affects needrestart versions 0.8 through 3.5 before 3.6 by not anchoring the regexes used to detect the Perl, Python, and Ruby interpreters, allowing local privilege escalation.
Which software versions are affected by CVE-2022-30688?
needrestart versions 0.8 through 3.5 before 3.6, as well as Debian Linux versions 9.0, 10.0, and 11.0, are affected by CVE-2022-30688.
What is the severity of CVE-2022-30688?
CVE-2022-30688 has a severity score of 7.8, which is considered high.
How can I fix CVE-2022-30688?
To fix CVE-2022-30688, it is recommended to update to needrestart version 3.6 or higher.