Security Vulnerability: Nimbuspwn aka CVE-2022-29799, CVE-2022-29800

This document (000020648) is provided subject to the disclaimer at the end of this document.

Situation

Security researchers from Microsoft have identified local root exploits caused by directory traversal problems in the networkd-dispatcher helper scripts that can be exploited by local attackers.

Resolution

SUSE does not ship networkd-dispatcher and is not affected by this security vulnerability.

Status

Security Alert

Additional Information

https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/
https://www.suse.com/security/cve/CVE-2022-29800.html
https://www.suse.com/security/cve/CVE-2022-29799.html
https://bugzilla.suse.com/show_bug.cgi?id=1198938

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

Document ID:000020648
Creation Date: 29-Apr-2022
Modified Date:29-Apr-2022
- SUSE Linux Enterprise Server
- SUSE Linux Enterprise Server for SAP Applications

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com