DSA-5137: -1 needrestart -- security update

Published May 17, 2022

Updated

Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

Affected Software

2 affected components

debian/needrestart

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade needrestart to a version that resolves this vulnerability.
Patch DSA-5137-1

Event History

May 17, 2022

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-30688

Frequently Asked Questions

Who can exploit this issue?

A local user can exploit the issue to escalate privileges. The advisory does not describe a remote attack vector.

What condition triggers the vulnerable code path?

The issue is triggered when needrestart checks whether Perl, Python, or Ruby interpreters are using old source files after library upgrades.

How can I identify potentially affected systems?

Review systems running Debian's needrestart utility, particularly where it is used to check daemon restart requirements following library upgrades. The advisory identifies CVE-2022-30688 as the tracked vulnerability.

DSA-5137: -1 needrestart -- security update

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who can exploit this issue?

What condition triggers the vulnerable code path?

How can I identify potentially affected systems?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What condition triggers the vulnerable code path?

How can I identify potentially affected systems?