CVE-2024-11003

Summary

CVE-2024-11003 is a newly identified vulnerability affecting Qualys' needrestart tool before version 3.8. This issue stems from the application's failure to sanitize user data before passing it to the Modules::ScanDeps library. Consequently, a local attacker can exploit this weakness and execute arbitrary shell commands, posing a significant security risk. It is crucial to upgrade to version 3.8 or later to mitigate this vulnerability, and users should also be vigilant against potential attacks leveraging CVE-2024-11003. Additionally, note the related CVE-2024-10224 vulnerability in Modules::ScanDeps.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.