GCVE - cpe:2.3:a:needrestart:needrestart:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:needrestart:needrestart:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Needrestart (`f92e12a5-32c1-528a-bf08-fd2919774a97`)
Product	Needrestart (`f6c9e150-a646-53ec-80d8-1b32b9367fc3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-48992`	vulnerable	2026-06-08 06:50:11.812477	Details available HIGH (7.8) Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable. Published: 2024-11-19T17:38:22.267Z Updated: 2025-11-03T22:22:13.836Z Open on db.gcve.eu Reference links https://www.cve.org/CVERecord?id=CVE-2024-48992 https://github.com/liske/needrestart/commit/b5f25f6ec6e7dd0c5be249e4e45de4ee9ffe594f https://www.qualys.com/2024/11/19/needrestart/needrestart.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48991`	vulnerable	2026-06-08 06:50:11.811880	Details available HIGH (7.8) Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter (instead of the system's real Python interpreter). The initial security fix (6ce6136) introduced a regression which was subsequently resolved (42af5d3). Published: 2024-11-19T17:38:15.691Z Updated: 2025-11-03T22:22:10.925Z Open on db.gcve.eu Reference links https://www.cve.org/CVERecord?id=CVE-2024-48991 https://github.com/liske/needrestart/commit/6ce6136cccc307c6b8a0f8cae12f9a22ac2aad59 https://github.com/liske/needrestart/commit/42af5d328901287a4f79d1f5861ac827a53fd56d https://www.qualys.com/2024/11/19/needrestart/needrestart.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-48990`	vulnerable	2026-06-08 06:50:11.810285	Details available HIGH (7.8) Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable. Published: 2024-11-19T17:38:07.238Z Updated: 2025-11-03T22:22:08.006Z Open on db.gcve.eu Reference links https://www.cve.org/CVERecord?id=CVE-2024-48990 https://github.com/liske/needrestart/commit/fcc9a4401392231bef4ef5ed026a0d7a275149ab https://www.qualys.com/2024/11/19/needrestart/needrestart.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11003`	vulnerable	2026-06-08 06:23:48.379267	Details available HIGH (7.8) Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps. Published: 2024-11-19T17:36:36.682Z Updated: 2025-11-03T21:51:44.254Z Open on db.gcve.eu Reference links https://www.cve.org/CVERecord?id=CVE-2024-11003 https://github.com/liske/needrestart/commit/0f80a348883f72279a859ee655f58da34babefb0 https://www.qualys.com/2024/11/19/needrestart/needrestart.txt https://www.cve.org/CVERecord?id=CVE-2024-10224	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Needrestart

Notes

PURL mappings

Vulnerability references

Contribute