CVE-2024-48991

Summary

CVE-2024-48991 is a vulnerability affecting Qualys' needrestart software before version 3.8. This issue allows local attackers to execute arbitrary code as root by exploiting a race condition and deceiving needrestart into using a fake Python interpreter instead of the legitimate one. An initial patch (6ce6136) inadvertently introduced a regression, which was later corrected with a subsequent fix (42af5d3).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.