CVE-2022-29800

PoC —1

CVSS 3.1

4.7 medium

EPSS

7%p94

Published

Sep 21, 2022 (Sep 21, 2022)

Modified

Jun 17, 2026

Description

A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.

Vendors: microsoft
Products: windows defender for endpoint
Weakness: CWE-367
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (7.2%)

In the news6 stories

Microsoft discovers ‘several’ vulnerabilities affecting Linux desktop endpoints

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability in the wildCVE-2022-29799 CVE-2022-29800

Week in review: Quantum Locker ransomware, most exploited vulnerabilities in 2021

Help Net SecurityMay 17, 06:57 UTC · May 17, 2022Ransomware CVE-2022-29799 CVE-2022-29800

Linux Nimbuspwn flaws could allow to deploy sophisticated threats

Security AffairsApr 27, 10:38 UTC · Apr 27, 2022Ransomware CVE-2022-29799 CVE-2022-29800

Nimbuspwn Linux Bugs Could Provide Root Access

Infosecurity MagazineApr 27, 09:30 UTC · Apr 27, 2022Ransomware in the wildCVE-2022-29799 CVE-2022-29800

Nimbuspwn bugs allow attackers to gain root privileges on some Linux machines (CVE-2022-29799, CVE-2022-29800)

Help Net SecurityApr 27, 00:00 UTC · Apr 27, 2022Vulnerability in the wildCVE-2022-29799 CVE-2022-29800 CVE-2022-0847

Microsoft Discovers New Privilege Escalation Flaws in Linux Operating System

The Hacker NewsApr 27, 03:21 UTC · Apr 27, 2022Vulnerability CVE-2022-29799 CVE-2022-29800