CVE-2022-30688

2022-05-1719:15:08

Google

osv.dev

0.0004 Low

EPSS

Percentile

5.1%

JSON

needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

CPENameOperatorVersion
needrestarteq2.4
needrestarteq0.8
needrestarteq2.11
needrestarteq2.1
needrestarteq3.4
needrestarteq2.2
needrestarteq3.2
needrestarteq3.0
needrestarteq2.8
needrestarteq3.5

Name	Operator	Version
needrestart	eq	2.4
needrestart	eq	0.8
needrestart	eq	2.11
needrestart	eq	2.1
needrestart	eq	3.4
needrestart	eq	2.2
needrestart	eq	3.2
needrestart	eq	3.0
needrestart	eq	2.8
needrestart	eq	3.5