Security Advisory
CVE-2024-48990
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with an attacker-controlled PYTHONPATH environment variable.