CVE-2019-9706

Name of the Vulnerable Software and Affected Versions Vixie Cron versions prior to 3.0pl1-133

Description The issue is related to a use-after-free error in the force rescan user function of the Cron daemon, which can cause a denial of service and daemon crash. This can be exploited by local users to disrupt service.

Recommendations For versions prior to 3.0pl1-133, update to the 3.0pl1-133 Debian package or later to resolve the issue. As a temporary workaround, consider restricting access to the Cron daemon to minimize the risk of exploitation.