CVE-2024-48992
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 19, 2024
Updated: Dec 3, 2024
CWE ID 427
Summary
CVE-2024-48992 is a newly discovered vulnerability affecting Qualys' needrestart software before version 3.8. This issue permits local attackers to execute arbitrary code as root by manipulating the RUBYLIB environment variable, causing the needrestart tool to unintentionally run the Ruby interpreter with malicious code. Attackers can exploit this vulnerability to gain elevated privileges and potentially take control of the affected system. It is recommended that users upgrade to the latest version of needrestart to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.