CVE-2024-48991

Dec. 3, 2024, 2:15 p.m.

7.8
High

Description

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter (instead of the system's real Python interpreter). The initial security fix (6ce6136) introduced a regression which was subsequently resolved (42af5d3).

Product(s) Impacted

Product Versions
needrestart
  • ['before 3.8']

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://github.com/liske/needrestart/commit/42af5d328901287a4f79d1f5861ac827a53fd56d
https://github.com/liske/needrestart/commit/6ce6136cccc307c6b8a0f8cae12f9a22ac2aad59
https://www.cve.org/CVERecord?id=CVE-2024-48991
https://www.qualys.com/2024/11/19/needrestart/needrestart.txt
http://www.openwall.com/lists/oss-security/2024/11/30/4
https://www.openwall.com/lists/oss-security/2024/11/19/1

Tags

security@ubuntu.com
2024-11-19
CVE-2024-48991

CVSS Score

7.8 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH

    • CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

    View Vector String

Timeline

Published: Nov. 19, 2024, 6:15 p.m.
Last Modified: Dec. 3, 2024, 2:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security@ubuntu.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.