Security Advisory
CVE-2024-48992
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable.