CVE-2024-11003
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to e…
Published: 2024-11-19 · CVSS: 7.8 · CVSS 3.1
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7