CVE-2022-30688

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2022/05/17/9Mailing List, Third Party Advisory
https://github.com/liske/needrestart/commit/e6e58136e1e3c92296e2e810cb8372a5fe0dbd30Patch, Third Party Advisory
https://github.com/liske/needrestart/releases/tag/v3.6Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00024.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-security-announce/2022/msg00105.htmlMailing List, Third Party Advisory
https://www.debian.org/security/2022/dsa-5137Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/05/17/9Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2024/Nov/15
http://seclists.org/fulldisclosure/2024/Nov/17
http://www.openwall.com/lists/oss-security/2022/05/17/9Mailing List, Third Party Advisory
https://github.com/liske/needrestart/commit/e6e58136e1e3c92296e2e810cb8372a5fe0dbd30Patch, Third Party Advisory
https://github.com/liske/needrestart/releases/tag/v3.6Release Notes, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/05/msg00024.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-security-announce/2022/msg00105.htmlMailing List, Third Party Advisory
https://www.debian.org/security/2022/dsa-5137Third Party Advisory
https://www.openwall.com/lists/oss-security/2022/05/17/9Mailing List, Third Party Advisory

Timeline

Published: May 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-306895.3HashiCorp Vault and Vault Enterprise from 1.10.0 to 1.10.2 did not correctly configure and enforce MFA on login after server restarts. This CVE-2022-30694.8The WordLift WordPress plugin before 3.37.2 does not sanitise and escape its settings, allowing high privilege users such as admin to perfor CVE-2022-306906.1A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specia CVE-2022-306915.5Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authenticated user to pot CVE-2022-306927.5Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable denia CVE-2022-306935.3Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the da CVE-2022-306946.5The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attac CVE-2022-306957.8Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Snap Deplo CVE-2022-306967.8Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before b CVE-2022-306977.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before bui CVE-2022-306986.5NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability w CVE-2022-306996.5NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability