CVE-2024-48992

HIGH

needrestart < 3.8 - Local Privilege Escalation via RUBYLIB Environment Variable

Title source: llm
STIX 2.1

Description

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.

References (6)

Core 6

Scores

CVSS v3 7.8
EPSS 0.0661
EPSS Percentile 93.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-427
Status published
Products (1)
needrestart_project/needrestart < 3.8
Published Nov 19, 2024
Tracked Since Feb 18, 2026