CVE-2024-48992

Updated: 2024-12-04 05:24:02.57715

Description:

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x 0

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Ubuntu 16.04 ELS needrestart 2.6 0.0 In Testing 2024-11-26 13:25:14
Ubuntu 18.04 ELS needrestart 3.1 0.0 Released CLSA-2024:1733429722 2024-12-05 16:22:09