CoreCVE
Back

HIGH

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable

Published Nov 19, 2024

Description

Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.

Affected products

Remediation

Vendor solution

Edit /etc/needrestart/needrestart.conf so that the following line appears after "# Disable interpreter scanners." and reboot: $nrconf{interpscan} = 0;

Weaknesses (1)

CWE-427

References (7)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner canonical
Published Nov 19, 2024
Updated Nov 3, 2025
Reserved Oct 11, 2024
Link CVE-2024-48990

CISA Vulnrichment

Updated Nov 19, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2024-48990

Red Hat

No data

ENISA EUVD

Assigner canonical
Published Nov 19, 2024
Updated Nov 3, 2025
Link EUVD-2024-43193

GitHub

No data