Vulnerabilitymedium
Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10224 | Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary… | 7.8 | 9% | PoC ×3 | |
CVE-2024-48990+3 related CVEs | Local Privilege Escalation in Ubuntu needrestart via attacker-controlled PYTHONPATH | 7.8 | 20% |
From the original article
2 min read at thehackernews.comMultiple decade-old security vulnerabilities have been disclosed in the needrestart package installed by default in Ubuntu Server (since version 21. 04) that could allow a local attacker to gain root privileges without requiring user interaction.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.