CVE-2024-48990: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into...
7.8
CVSS
Description
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
Classification
CVE ID: CVE-2024-48990
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
Affected Products
Vendor: needrestart
Product: needrestart
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.25% (probability of being exploited)
EPSS Percentile: 64.67% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://www.cve.org/CVERecord?id=CVE-2024-48990https://github.com/liske/needrestart/commit/fcc9a4401392231bef4ef5ed026a0d7a275149ab
https://www.qualys.com/2024/11/19/needrestart/needrestart.txt