Every CVE Search/ Get API key

CVE-2022-29799

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are...

5.5 MediumPublic exploitFix available

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

11.8%Up 10.9 points since Sep 22, 2022
90%50%10%1%

What each source reports

NVD Score used 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
CVE-2022-29799
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE List 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
CVE-2022-29799
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
EUVDEUVD-2022-34120 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
EUVD-2022-34120
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-637r-47cq-j74p 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are...

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
GHSA-637r-47cq-j74p
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
OSV 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
CVE-2022-29799
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-29799 5.5

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
UBUNTU-CVE-2022-29799
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2022-29799 No score

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Record
DEBIAN-CVE-2022-29799
Updated
2026-11-03
OSVUSN-5395-1 No score

networkd-dispatcher vulnerabilities

It was discovered that networkd-dispatcher incorrectly handled internal scripts. A local attacker could possibly use this issue to cause a race condition, escalate privileges and execute arbitrary code. (CVE-2022-29799, CVE-2022-29800)

Record
USN-5395-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
networkd-dispatcher
Debian:12
 before 2.2.3-1
2.2.3-1
networkd-dispatcher
Debian:13
 before 2.2.3-1
2.2.3-1
networkd-dispatcher
Debian:14
 before 2.2.3-1
2.2.3-1
networkd-dispatcher
Ubuntu:18.04:LTS
 before 1.7-0ubuntu3.5, plus listed versions
1.7-0ubuntu11.7-0ubuntu21.7-0ubuntu31.7-0ubuntu3.21.7-0ubuntu3.31.7-0ubuntu3.4
1.7-0ubuntu3.5
networkd-dispatcher
Ubuntu:20.04:LTS
 before 2.1-2~ubuntu20.04.3, plus listed versions
2.0.1-12.1-2~ubuntu20.04.12.1-2~ubuntu20.04.2
2.1-2~ubuntu20.04.3
networkd-dispatcher
Ubuntu:22.04:LTS
 before 2.1-2ubuntu0.22.04.2, plus listed versions
2.1-22.1-2ubuntu0.22.04.1
2.1-2ubuntu0.22.04.2
networkd-dispatcher
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 1.7-0ubuntu3.4, plus listed versions
1.7-0ubuntu11.7-0ubuntu21.7-0ubuntu31.7-0ubuntu3.21.7-0ubuntu3.3
1.7-0ubuntu3.4
networkd-dispatcher
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 2.1-2~ubuntu20.04.2, plus listed versions
2.0.1-12.1-2~ubuntu20.04.1
2.1-2~ubuntu20.04.2
networkd-dispatcher
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 2.1-2ubuntu0.22.04.1, plus listed versions
2.1-2
2.1-2ubuntu0.22.04.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubjoshuavanderpoll/NimbusPWN-CVE-2022-29799-298002026-06-17

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-29799 is a medium vulnerability (CVSS 5.5) in Microsoft Windows Defender For Endpoint, published April 27, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.8%, the 96th percentile. Fixed in networkd-dispatcher 2.2.3-1.

References

Show 4 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open