CVE-2022-30688
- State
- Published
- Severity
- Not scored
- Published
- May 17, 2022
- Updated
- Nov 3, 2025
- Reserved
- May 13, 2022
Description
needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://github.com/liske/needrestart/releases/tag/v3.6
- https://github.com/liske/needrestart/commit/e6e58136e1e3c92296e2e810cb8372a5fe0dbd30
- https://lists.debian.org/debian-security-announce/2022/msg00105.html
- https://www.openwall.com/lists/oss-security/2022/05/17/9
- [oss-security] 20220517 CVE-2022-30688: needrestart 0.8+ local privilege escalationmailing-list
- DSA-5137vendor-advisory
- [debian-lts-announce] 20220518 [SECURITY] [DLA 3013-1] needrestart security updatemailing-list
- http://seclists.org/fulldisclosure/2024/Nov/17
- http://seclists.org/fulldisclosure/2024/Nov/15
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.