Known vulnerabilities in needrestart (Ubuntu package) 3.5-4ubuntu2

Version: 3.5-4ubuntu2
Software CPE: cpe:2.3:o:canonical:needrestart_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 5
Public exploits: 3
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting needrestart (Ubuntu package) version 3.5-4ubuntu2 needrestart (Ubuntu package) 3.5-4ubuntu2 is affected by 5 vulnerabilities: 5 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11003
CWE-78 Low
Public exploit available
No
Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100984 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48992
CWE-94 Low
No
No
Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-48991
CWE-362 Low
Public exploit available
No
Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100982 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-48990
CWE-94 Low
Public exploit available
Exploited
Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 27.11.2024 SB2024112721
SB2024112724
SB2024112725
and 9 more
#VU100773 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-10224
CWE-78 Low
No
No
Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 21.11.2024 SB2024112115
SB2024112118
SB2024112139
and 7 more