CVE-2022-30688

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation

published May 17, 2022

CVSS
—
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Published
2022-05-17T18:58Z
EPSS history
Timeline
  • 17 MAY 18:58Z
    needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation
    cvelistv5