CVE-2024-48990

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2024-48990 needrestart Corrigé dans: 3.5-4+deb11u4

Références

advisory github.com
advisory nvd.nist.gov
advisory qualys.com
package github.com
patch github.com
report cve.org
web seclists.org
web lists.debian.org
web openwall.com