VULNERABILITY INTELLIGENCE

CVE-2022-29799

CVSS score5.5 MEDIUM

EPSS probability11.76%

CISA KEVNot currently listed

Published2022-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Weakness classification

patrick@puiterwijk.org: CWE-22
nvd@nist.gov: CWE-22

Primary references

patrick@puiterwijk.org — Exploit, Patch, Technical Description, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Technical Description, Vendor Advisory