Local Code Execution Vulnerability in Needrestart Product by Qualys

CVE-2024-48992

What is CVE-2024-48992?

The vulnerability in Needrestart, prior to version 3.8, enables local attackers to execute arbitrary code with root privileges. This is achieved by manipulating the RUBYLIB environment variable, prompting Needrestart to invoke the Ruby interpreter in an unintended manner. It is crucial for organizations using affected versions to apply necessary patches to mitigate this security risk.

References