CVE-2024-11003

Name of the Vulnerable Software and Affected Versions needrestart versions prior to 3.8

Description The issue is related to needrestart passing unsanitized data to a library, which expects safe input. This could allow a local attacker to execute arbitrary shell commands with root privileges.

Recommendations For versions prior to 3.8, update to version 3.8 or later to resolve the issue. As a temporary workaround, consider restricting the use of the needrestart utility until a patch is applied. Avoid using the needrestart utility with unsanitized input data to minimize the risk of exploitation.