CVE-2022-29799

Publication date 27 April 2022

Last updated 24 July 2024

Ubuntu priority

High

Why this priority?

Cvss 3 Severity Score

5.5 · Medium

Score breakdown

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Status

Package Ubuntu Release Status
networkd-dispatcher 22.04 LTS jammy
Fixed 2.1-2ubuntu0.22.04.2
21.10 impish
Fixed 2.1-2ubuntu0.21.10.2
20.04 LTS focal
Fixed 2.1-2~ubuntu20.04.3
18.04 LTS bionic
Fixed 1.7-0ubuntu3.5

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
networkd-dispatcher

Severity score breakdown

Parameter Value
Base score 5.5 · Medium
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality High
Integrity impact None
Availability impact None
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N