CVE-2024-48992

説明

CVE.org より

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.

詳細

Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.

よくある質問

Not sure what something means? Check out our Security Glossary.

エラータ通知の受信を希望しますか? こちらで登録してください。