CVE-2024-48991

Summary

CVE-2024-48991 is a vulnerability affecting Qualys' needrestart component before version 3.8. This issue permits local attackers to execute arbitrary root code by exploiting a race condition and deceiving needrestart into utilizing a fake Python interpreter instead of the genuine system Python interpreter. An initial patch (6ce6136) inadvertently introduced a regression, which was later rectified (42af5d3).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.