CVE catalog

CVE-2022-29799

networkd-dispatcher: CVE-2022-29799

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
11.76% · Oct 25, 2026

A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannetworkd-dispatchersid2.2.4-1.2fixed
Debiannetworkd-dispatcherforky2.2.4-1.2fixed
Debiannetworkd-dispatchertrixie2.2.4-1.1fixed
Debiannetworkd-dispatcherbookworm2.2.3-1fixed
Ubuntunetworkd-dispatcher18.041.7-0ubuntu1vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu2vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.2vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.3vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.4fixed
Ubuntunetworkd-dispatcher20.042.0.1-1vulnerable
Ubuntunetworkd-dispatcher20.042.1-2~ubuntu20.04.1vulnerable
Ubuntunetworkd-dispatcher20.042.1-2~ubuntu20.04.2fixed
Ubuntunetworkd-dispatcher22.042.1-2vulnerable
Ubuntunetworkd-dispatcher22.042.1-2ubuntu0.22.04.1fixed
Ubuntunetworkd-dispatcher18.041.7-0ubuntu1vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu2vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.2vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.3vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.4vulnerable
Ubuntunetworkd-dispatcher18.041.7-0ubuntu3.5fixed
Ubuntunetworkd-dispatcher20.042.0.1-1vulnerable
Ubuntunetworkd-dispatcher20.042.1-2~ubuntu20.04.1vulnerable
Ubuntunetworkd-dispatcher20.042.1-2~ubuntu20.04.2vulnerable
Ubuntunetworkd-dispatcher20.042.1-2~ubuntu20.04.3fixed
Ubuntunetworkd-dispatcher22.042.1-2vulnerable
Ubuntunetworkd-dispatcher22.042.1-2ubuntu0.22.04.1vulnerable
Ubuntunetworkd-dispatcher22.042.1-2ubuntu0.22.04.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannetworkd-dispatchersourcesid2.2.3-1unimportantNot reported[1010303]
Debiannetworkd-dispatchersourceforky2.2.3-1unimportantNot reported[1010303]
Debiannetworkd-dispatchersourcetrixie2.2.3-1unimportantNot reported[1010303]
Debiannetworkd-dispatchersourcebookworm2.2.3-1unimportantNot reported[1010303]
Ubuntunetworkd-dispatcherdeb18.041.7-0ubuntu3.4Not reportedUSN-5395-1Not reported
Ubuntunetworkd-dispatcherdeb20.042.1-2~ubuntu20.04.2Not reportedUSN-5395-1Not reported
Ubuntunetworkd-dispatcherdeb22.042.1-2ubuntu0.22.04.1Not reportedUSN-5395-1Not reported
Ubuntunetworkd-dispatcherdeb18.041.7-0ubuntu3.5Not reportedUBUNTU-CVE-2022-29799Not reported
Ubuntunetworkd-dispatcherdeb20.042.1-2~ubuntu20.04.3Not reportedUBUNTU-CVE-2022-29799Not reported
Ubuntunetworkd-dispatcherdeb22.042.1-2ubuntu0.22.04.2Not reportedUBUNTU-CVE-2022-29799Not reported

[Debian bug #1010303]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (2)
    • 2.2.3-1 · all · bookworm

      Fixed · Fixed: 2.2.3-1

      dsa · networkd-dispatcher · debian · bookworm

    • 2.2.3-1 · all · bookworm

      Fixed · Fixed: 2.2.3-1

      dsa · networkd-dispatcher · debian · bookworm

Observed:

References