Detections
Analytics
CVE-2024-48990
high
Description
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
References
https://github.com/BLUEBERRYP1LL/CVE-2024-48990
https://github.com/tahsinunluturk/needrestart-privesc-cve-2024-48990
https://github.com/0x3bs/CVE-2024-48990
https://github.com/mladicstefan/CVE-2024-48990
https://github.com/Serner77/CVE-2024-48990-Automatic-Exploit
https://github.com/bj715/TDCVES
https://github.com/ten-ops/CVE-2024-48990_needrestart
https://github.com/CyberCrowCC/CVE-2024-48990
https://github.com/ally-petitt/CVE-2024-48990-Exploit
https://github.com/njeru-codes/needrestart-vulnerability-poc
https://github.com/Cyb3rFr0g/CVE-2024-48990-PoC
https://github.com/felmoltor/CVE-2024-48990
https://github.com/ns989/CVE-2024-48990
https://www.openwall.com/lists/oss-security/2024/11/19/1
https://www.cve.org/CVERecord?id=CVE-2024-48990
https://lists.debian.org/debian-lts-announce/2024/11/msg00014.html
https://github.com/liske/needrestart/commit/fcc9a4401392231bef4ef5ed026a0d7a275149ab