Approved changes feed: RSS · Atom

cpe:2.3:a:cron_project:cron:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCron Project (f85185d3-9260-5e83-8fdd-60cf8a9825ca)
ProductCron (7dca071b-376a-5b0d-a5f9-9605a3aca08e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cron purl2cpe 2026-06-01 10:13:26.131788
pkg:deb/ubuntu/cron purl2cpe 2026-06-01 10:13:26.131791

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9705 vulnerable 2026-06-08 05:14:26.074478 Details available
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
Published: 2019-03-12T00:00:00.000Z
Updated: 2024-08-04T21:54:45.146Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9704 vulnerable 2026-06-08 05:14:26.073787 Details available
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
Published: 2019-03-12T00:00:00.000Z
Updated: 2024-08-04T21:54:45.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9525 vulnerable 2026-06-08 05:10:10.093582 Details available
In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
Published: 2017-06-09T16:00:00.000Z
Updated: 2024-08-05T17:11:01.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.