CVE-2024-48990highCWE-427

CVE-2024-48990: high-severity vulnerability in needrestart

Published · Updated

Follow this CVE+ Monitor needrestart+ Monitor needrestart

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 7.8epss 29%
from disclosure to weaponsame day
Published on NVDNov 19
metasploitNov 19
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
needrestart · needrestart
Related CVEs — needrestart

In the same product, most dangerous first.

CVE-2024-11003HIGHCVE-2024-11003EPSS 12.0%CVE-2024-48992HIGHCVE-2024-48992EPSS 8.0%CVE-2024-48991HIGHCVE-2024-48991EPSS 6.1%