needrestart Project needrestart
Approved changes feed: RSS · Atom
cpe:2.3:a:needrestart_project:needrestart:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Needrestart Project (43425cd1-2376-57ec-bd45-f56a67e0ecea) |
|---|---|
| Product | Needrestart (8435fe15-7918-5008-8288-bca648495b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/needrestart |
purl2cpe | 2026-06-01 10:14:39.193039 |
pkg:deb/ubuntu/needrestart |
purl2cpe | 2026-06-01 10:14:39.193043 |
pkg:github/liske/needrestart |
purl2cpe | 2026-06-01 10:14:39.193045 |
pkg:rpm/fedora/needrestart |
purl2cpe | 2026-06-01 10:14:39.193048 |
pkg:rpm/opensuse/needrestart |
purl2cpe | 2026-06-01 10:14:39.193051 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-48992 |
vulnerable | 2026-06-08 06:50:11.812351 |
Details available
HIGH (7.8)
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.
Published: 2024-11-19T17:38:22.267Z
Updated: 2025-11-03T22:22:13.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48991 |
vulnerable | 2026-06-08 06:50:11.811834 |
Details available
HIGH (7.8)
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by winning a race condition and tricking needrestart into running their own, fake Python interpreter (instead of the system's real Python interpreter). The initial security fix (6ce6136) introduced a regression which was subsequently resolved (42af5d3).
Published: 2024-11-19T17:38:15.691Z
Updated: 2025-11-03T22:22:10.925Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48990 |
vulnerable | 2026-06-08 06:50:11.809402 |
Details available
HIGH (7.8)
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.
Published: 2024-11-19T17:38:07.238Z
Updated: 2025-11-03T22:22:08.006Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11003 |
vulnerable | 2026-06-08 06:23:48.377837 |
Details available
HIGH (7.8)
Qualys discovered that needrestart, before version 3.8, passes unsanitized data to a library (Modules::ScanDeps) which expects safe input. This could allow a local attacker to execute arbitrary shell commands. Please see the related CVE-2024-10224 in Modules::ScanDeps.
Published: 2024-11-19T17:36:36.682Z
Updated: 2025-11-03T21:51:44.254Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.