Known vulnerabilities in needrestart (Ubuntu package) 3.6-8ubuntu2
Vendor:
Canonical Ltd.
Software:
needrestart (Ubuntu package)
Version:
3.6-8ubuntu2
Software CPE:
cpe:2.3:o:canonical:needrestart_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
5
Public exploits:
3
Known exploited (KEV):
1
Vulnerabilities by Severity
2.6-1ubuntu0.1~esm1
3.4-6ubuntu0.1+esm1
3.1-1ubuntu0.1+esm1
3.8-2
3.9-1
3.10-1
3.11-1
3.11-1ubuntu2
3.11-1ubuntu1
3.5-5ubuntu2.5
3.5-4+deb11u4
3.5-4+deb11u5
3.6-4+deb12u2
3.6-4+deb12u3
3.7-1
3.7-2
3.7-3
3.7-3.1
3.7-3.2
3.7-3.3
3.8-0.1
3.8-1
3.6-8ubuntu7
3.6-8ubuntu6
3.6-8ubuntu5
3.6-8ubuntu4.2
3.6-8ubuntu4
3.6-8ubuntu4.1
3.6-8ubuntu3
3.6-8ubuntu2
3.6-4+deb12u1
3.6-8
3.6-8ubuntu1
3.6-7ubuntu4.3
3.6-7ubuntu4.2
3.6-7ubuntu4
3.6-7ubuntu4.1
3.6-7ubuntu3
3.6-7ubuntu2
3.6-7ubuntu1
3.6-7
3.6-6
3.5-4+deb11u3
3.6-5
3.6-4
3.6-3ubuntu0.23.04.1
3.6-3
3.5-4+deb11u2
3.6-2
3.6-1ubuntu0.1
3.4-5+deb10u1
3.5-4+deb11u1
3.6-1
3.5-5ubuntu2.2
3.5-5ubuntu2
3.5-5
3.5-5ubuntu1
3.5-4ubuntu2
3.5-3
3.5-4
3.5-4ubuntu1
3.5-2ubuntu2
3.5-2
3.5-2ubuntu1
3.8-1ubuntu1
3.5-5ubuntu2.4
3.6-7ubuntu4.5
3.6-8ubuntu4.4
Ubuntu Pro
3.5-5ubuntu2.3
3.6-7ubuntu4.4
3.6-8ubuntu4.3
3.4-6ubuntu0.1
3.5-4ubuntu2.1
3.5-5ubuntu2.1
3.1-1ubuntu0.1
3.5
3.5-1
3.4
3.4-6
3.1
2.6
0.5
3.4-5
3.4-3~bpo9+1
3.4-4
3.4-2
3.4-3
3.4-1
3.3-1~bpo9+1
3.3-2
3.3-1
3.1-1~bpo9+1
3.2-1
2.11-3+deb9u1
3.0-1~bpo9+1
3.1-1
2.11+git20180213-1
3.0-1
2.11-2~bpo8+1
2.9-1~bpo8+1
2.8-1~bpo8+1
2.7-1~bpo8+1
1.2-8+deb8u1
1.2-2~bpo70+1
1.2-7~bpo70+1
1.2+git20141031-1
1.2+git20141115-1
2.11-4
2.11-3
2.11-2
2.11-1
2.3-1
2.3-2
2.4-1
2.5-1
2.6-1
2.7-1
2.8-1
2.9-1
2.10-1
2.0-1
2.0-2
2.1-1
0.2-1
0.3-1
0.4-1
0.5-1
0.5-2
0.6-1
0.7-1
0.8-1
0.9-1
1.0-1
1.1-1
1.2-1
1.2-2
1.2-3
1.2-4
1.2-5
1.2-6
1.2-7
1.2-8
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100986 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-11003 |
CWE-78 | Low | Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100984 - Improper Control of Generation of Code ('Code Injection') CVE-2024-48992 |
CWE-94 | Low | Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100983 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-48991 |
CWE-362 | Low | Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100982 - Improper Control of Generation of Code ('Code Injection') CVE-2024-48990 |
CWE-94 | Low | Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 | 27.11.2024 |
SB2024112721 SB2024112724 SB2024112725 and 9 more |
||
| #VU100773 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-10224 |
CWE-78 | Low | Ubuntu Pro, 2.6-1ubuntu0.1~esm1, 3.1-1ubuntu0.1+esm1, 3.4-6ubuntu0.1+esm1, 3.5-5ubuntu2.2, 3.5-5ubuntu2.3, 3.5-5ubuntu2.4, 3.6-7ubuntu4.3, 3.6-7ubuntu4.4, 3.6-7ubuntu4.5, 3.6-8ubuntu4.2, 3.6-8ubuntu4.3, 3.6-8ubuntu4.4 | 21.11.2024 |
SB2024112115 SB2024112118 SB2024112139 and 7 more |