{"uuid": "51ea8347-df33-4cbc-8b17-b5d4e7ab4c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29799", "type": "seen", "source": "https://t.me/hacking_Attack/51367", "content": "Black Hat Ethical Hacking\nNew Nimbuspwn Linux vulnerability gives hackers root privileges\n\nNew Nimbuspwn Linux vulnerability gives hackers root privilegesPost Views: 52 \nPremium Content\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nA new set of vulnerabilities collectively tracked as Nimbuspwn could let local attackers escalate privileges on Linux systems to deploy malware ranging from backdoors to ransomware.\nSecurity researchers at Microsoft disclosed the issues in a report today noting that they can be chained together to achieve root privileges on a vulnerable system.\n\nTracked as CVE-2022-29799 and CVE-2022-29800, the Nimbuspwn security issues were discovered in networkd-dispatcher, a component that sends connection status changes on Linux machines.\n\nDiscovering the vulnerabilities started with \u201clistening to messages on the System Bus,\u201d which prompted the researchers to review the code flow for networkd-dispatcher.\n\nThe Nimbuspwn security flaws refer to directory traversal, symlink race, and time-of-check-time-of-use (TOCTOU) race condition issues, explains Microsoft researcher Jonathan Bar Or says in the report.\n\nOne observation that piqued interest was that the networkd-dispatcher daemon was running at boot time with root privileges on the system.\nhttps://www.bleepstatic.com/images/news/u/1100723/2022/networkd-dispatcher-root.png \n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:42.896383Z"}