Needrestart Project Needrestart
5 CVEs affecting Needrestart Project Needrestart. Latest disclosed: 2024-11-19. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-48992 | High | 7.8 | 2024-11-19 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby… |
CVE-2024-48991 | High | 7.8 | 2024-11-19 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needr… |
CVE-2024-48990 | High | 7.8 | 2024-11-19 | Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Pytho… |
CVE-2024-11003 | High | 7.8 | 2024-11-19 | Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a l… |
CVE-2022-30688 | High | 7.8 | 2022-05-17 | needrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect the Perl, Python, and Ruby interpreters are not anchored, allo… |