needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to detect if interpreters are using old source files.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl,     Python, and Ruby interpreters are not anchored, allowing a local user to escalate privileges when     needrestart tries to detect if interpreters are using old source files. (CVE-2022-30688)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-3013 advisory.

    Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need     to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby     interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to     detect if interpreters are using old source files. For Debian 9 stretch, this problem has been fixed in     version 2.11-3+deb9u2. We recommend that you upgrade your needrestart packages. For the detailed security     status of needrestart please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/needrestart Further information about Debian LTS security advisories, how to     apply these updates to your system and frequently asked questions can be found at:
    https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5137 advisory.

    Jakub Wilk discovered a local privilege escalation in needrestart, a utility to check which daemons need     to be restarted after library upgrades. Regular expressions to detect the Perl, Python, and Ruby     interpreters are not anchored, allowing a local user to escalate privileges when needrestart tries to     detect if interpreters are using old source files. For the oldstable distribution (buster), this problem     has been fixed in version 3.4-5+deb10u1. For the stable distribution (bullseye), this problem has been     fixed in version 3.5-4+deb11u1. We recommend that you upgrade your needrestart packages. For the detailed     security status of needrestart please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/needrestart

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5426-1 advisory.

    Jakub Wilk discovered that needrestart incorrectly used some regular expressions. A local attacker could     possibly use this issue to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
250591	Linux Distros Unpatched Vulnerability : CVE-2022-30688	Nessus	Misc.	high
161398	Debian DLA-3013-1 : needrestart - LTS security update	Nessus	Debian Local Security Checks	high
161254	Debian DSA-5137-1 : needrestart - security update	Nessus	Debian Local Security Checks	high
161253	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : needrestart vulnerability (USN-5426-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2022-30688

high

Tenable Plugins

high

high

high

high