CVE-2022-29800CWE-367

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher

Medium · published September 21, 2022

CVSS v3.1
4.7
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.07162 · 94.3th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2022-09-21T18:21Z
EPSS history
Timeline
  • 21 SEP 18:21Z
    A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher
    cvelistv5