CVE-2024-48992
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 6.6%
exploitation probability
6.6%top 7% of all CVEs
observed exploitation
nono source reports it
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
needrestart · needrestartReferences
http://seclists.org/fulldisclosure/2024/Nov/17https://github.com/liske/needrestart/commit/b5f25f6ec6e7dd0c5be249e4e45de4ee9ffe594fhttps://lists.debian.org/debian-lts-announce/2024/11/msg00014.htmlhttps://www.cve.org/CVERecord?id=CVE-2024-48992https://www.openwall.com/lists/oss-security/2024/11/19/1https://www.qualys.com/2024/11/19/needrestart/needrestart.txt