Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

The wsl2 installation on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.

The remote Windows host is missing security update 5021237. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021249. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)   
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021234. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021255. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44676)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
169974	Security Updates for Windows Subsystem for Linux (WSL2) Elevation of Privilege (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168693	KB5021237: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168690	KB5021249: Windows Server 2022 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168688	KB5021234: Windows 11 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168685	KB5021255: Windows 11 Version 22H2 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168679	KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-44689

high

Tenable Plugins

high

high

high

high

high

high