Vulnerabilitycritical
Five Privilege Escalation Flaws Found in Ubuntu needrestart
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-10224 | Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary… | 7.8 | 9% | PoC ×3 | |
CVE-2024-48990+3 related CVEs | Local Privilege Escalation in Ubuntu needrestart via attacker-controlled PYTHONPATH | 7.8 | 20% |
From the original article
1 min read at infosecurity-magazine.com
Five Local Privilege Escalation (LPE) vulnerabilities in Ubuntu Server’s needrestart utility have been discovered. These flaws, found by the Qualys Threat Research Unit (TRU), affect versions prior to 3. 8, enabling unprivileged users to escalate their privileges to root without requiring user interaction.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.