CVE-2022-29799

PoC —

CVSS 3.1

5.5 medium

EPSS

12%p96

Published

Sep 21, 2022 (Sep 21, 2022)

Modified

Jun 17, 2026

Description

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Vendors: microsoft
Products: windows defender for endpoint
Weakness: CWE-22
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (11.8%)

In the news6 stories

Microsoft discovers ‘several’ vulnerabilities affecting Linux desktop endpoints

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability in the wildCVE-2022-29799 CVE-2022-29800

Week in review: Quantum Locker ransomware, most exploited vulnerabilities in 2021

Help Net SecurityMay 17, 06:57 UTC · May 17, 2022Ransomware CVE-2022-29799 CVE-2022-29800

Linux Nimbuspwn flaws could allow to deploy sophisticated threats

Security AffairsApr 27, 10:38 UTC · Apr 27, 2022Ransomware CVE-2022-29799 CVE-2022-29800

Nimbuspwn Linux Bugs Could Provide Root Access

Infosecurity MagazineApr 27, 09:30 UTC · Apr 27, 2022Ransomware in the wildCVE-2022-29799 CVE-2022-29800

Nimbuspwn bugs allow attackers to gain root privileges on some Linux machines (CVE-2022-29799, CVE-2022-29800)

Help Net SecurityApr 27, 00:00 UTC · Apr 27, 2022Vulnerability in the wildCVE-2022-29799 CVE-2022-29800 CVE-2022-0847

Microsoft Discovers New Privilege Escalation Flaws in Linux Operating System

The Hacker NewsApr 27, 03:21 UTC · Apr 27, 2022Vulnerability CVE-2022-29799 CVE-2022-29800