High severity7.8NVD Advisory· Published Nov 19, 2024· Updated Jun 17, 2026
CVE-2024-11003
CVE-2024-11003
Description
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <3.8
- Range: 0
Patches
Vulnerability mechanics
References
7- github.com/liske/needrestart/commit/0f80a348883f72279a859ee655f58da34babefb0nvdPatch
- www.qualys.com/2024/11/19/needrestart/needrestart.txtnvdThird Party Advisory
- www.cve.org/CVERecordnvdVDB Entry
- www.cve.org/CVERecordnvdVDB Entry
- www.openwall.com/lists/oss-security/2024/11/19/1nvdMailing List
- seclists.org/fulldisclosure/2024/Nov/17nvd
- lists.debian.org/debian-lts-announce/2024/11/msg00014.htmlnvd
News mentions
0No linked articles in our index yet.