Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Liske

#20041of 60,399
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2024-8538
2024-11-17
7.8
CVE-2024-11003
Unknown
Needrestart
The issue is related to needrestart passing unsanitized data to a library, which expects safe input. This could allow a local attacker to execute arbitrary shell commands with root privileges.
PT-2024-8540
2024-11-17
7.8
CVE-2024-48992
Unknown
Needrestart
The issue is related to an uncontrolled search path element in the needrestart utility. Exploitation of this issue may allow an attacker to execute arbitrary code in the context of the root user by manipulating the `RUBYLIB` environment variable. This can be achieved by tricking needrestart into running the Ruby interpreter with an attacker-controlled `RUBYLIB` variable.