CVE-2024-48992

Summary

CVE-2024-48992 is a newly discovered vulnerability affecting Qualys' needrestart software before version 3.8. This issue enables local attackers to execute arbitrary code as the root user by manipulating the RUBYLIB environment variable, tricking needrestart into using the attacker's controlled Ruby interpreter. Exploitation of this vulnerability could result in significant system compromise. Users are strongly urged to upgrade to the latest version of needrestart to mitigate this risk. Qualys has released a patch to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.