needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3013 advisory.

  - needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl,     Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when     needrestart tries to detect if interpreters are using old source files. (CVE-2022-30688)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5137 advisory.

  - needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl,     Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when     needrestart tries to detect if interpreters are using old source files. (CVE-2022-30688)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5426-1 advisory.

    Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could     possibly use this issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
161398	Debian DLA-3013-1 : needrestart - LTS security update	Nessus	Debian Local Security Checks	high
161254	Debian DSA-5137-1 : needrestart - security update	Nessus	Debian Local Security Checks	high
161253	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : needrestart vulnerability (USN-5426-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-30688

high

Tenable Plugins

high

high

high