Debian Networkd-Dispatcher vulnerabilities

CVE-2022-29799 [MEDIUM] CVE-2022-29799: networkd-dispatcher - A vulnerability was found in networkd-dispatcher. This flaw exists because no fu... A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack leads to a directory traversal to escape from the “/etc/networkd-dispatcher” base directory. Scope: local bookworm: resolved (fixed in 2.2.3-1) bullseye: open forky:

CVE-2022-29800 [MEDIUM] CVE-2022-29800: networkd-dispatcher - A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in n... A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not. Scope: loc