Vulnerabilitymedium
Decade-old local privilege escalation bugs impacts Ubuntu needrestart package
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10224 | Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary… | 7.8 | 9% | PoC ×3 | |
CVE-2024-48990+3 related CVEs | Local Privilege Escalation in Ubuntu needrestart via attacker-controlled PYTHONPATH | 7.8 | 20% |
From the original article
2 min read at securityaffairs.com
Decade-old flaws in the needrestart package in Ubuntu Server could allow local attackers to gain root privileges without user interaction. The Qualys Threat Research Unit (TRU) discovered five Local Privilege Escalation (LPE) decade-old security vulnerabilities in the needrestart package that could allow a local attacker to gain root privileges without requiring user interaction.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.