← Back

CVE-2019-9706

nvd nist
Published: Mar 12, 2019Modified: Nov 21, 2024

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.

Affected (99)

Debian
2 products
Cron
Debian Linux
Configuration A
97 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Cron
Version 3.0
Cron
Version 3.0 pl1-100
Cron
Version 3.0 pl1-101
Cron
Version 3.0 pl1-102
Cron
Version 3.0 pl1-103
Cron
Version 3.0 pl1-104
Cron
Version 3.0 pl1-105
Cron
Version 3.0 pl1-106
Cron
Version 3.0 pl1-107
Cron
Version 3.0 pl1-108
Cron
Version 3.0 pl1-109
Cron
Version 3.0 pl1-110
Cron
Version 3.0 pl1-111
Cron
Version 3.0 pl1-112
Cron
Version 3.0 pl1-113
Cron
Version 3.0 pl1-114
Cron
Version 3.0 pl1-115
Cron
Version 3.0 pl1-116
Cron
Version 3.0 pl1-117
Cron
Version 3.0 pl1-118
Cron
Version 3.0 pl1-119
Cron
Version 3.0 pl1-120
Cron
Version 3.0 pl1-121
Cron
Version 3.0 pl1-122
Cron
Version 3.0 pl1-123
Cron
Version 3.0 pl1-124.1
Cron
Version 3.0 pl1-124.2
Cron
Version 3.0 pl1-124
Cron
Version 3.0 pl1-125
Cron
Version 3.0 pl1-126
Cron
Version 3.0 pl1-127
Cron
Version 3.0 pl1-128
Cron
Version 3.0 pl1-130
Cron
Version 3.0 pl1-131
Cron
Version 3.0 pl1-132
Cron
Version 3.0 pl1-37
Cron
Version 3.0 pl1-38
Cron
Version 3.0 pl1-39
Cron
Version 3.0 pl1-40
Cron
Version 3.0 pl1-41
Cron
Version 3.0 pl1-42
Cron
Version 3.0 pl1-43
Cron
Version 3.0 pl1-44
Cron
Version 3.0 pl1-45
Cron
Version 3.0 pl1-46
Cron
Version 3.0 pl1-47
Cron
Version 3.0 pl1-48
Cron
Version 3.0 pl1-49
Cron
Version 3.0 pl1-50.1
Cron
Version 3.0 pl1-50.2
Cron
Version 3.0 pl1-50
Cron
Version 3.0 pl1-51
Cron
Version 3.0 pl1-53
Cron
Version 3.0 pl1-54
Cron
Version 3.0 pl1-55
Cron
Version 3.0 pl1-56
Cron
Version 3.0 pl1-57.2
Cron
Version 3.0 pl1-57.3
Cron
Version 3.0 pl1-57
Cron
Version 3.0 pl1-58
Cron
Version 3.0 pl1-59
Cron
Version 3.0 pl1-60
Cron
Version 3.0 pl1-61
Cron
Version 3.0 pl1-62
Cron
Version 3.0 pl1-63
Cron
Version 3.0 pl1-64
Cron
Version 3.0 pl1-65
Cron
Version 3.0 pl1-66
Cron
Version 3.0 pl1-67
Cron
Version 3.0 pl1-68
Cron
Version 3.0 pl1-69
Cron
Version 3.0 pl1-70
Cron
Version 3.0 pl1-71
Cron
Version 3.0 pl1-72
Cron
Version 3.0 pl1-73
Cron
Version 3.0 pl1-74
Cron
Version 3.0 pl1-75
Cron
Version 3.0 pl1-76
Cron
Version 3.0 pl1-77
Cron
Version 3.0 pl1-78
Cron
Version 3.0 pl1-79
Cron
Version 3.0 pl1-80
Cron
Version 3.0 pl1-81
Cron
Version 3.0 pl1-82
Cron
Version 3.0 pl1-83
Cron
Version 3.0 pl1-84
Cron
Version 3.0 pl1-85
Cron
Version 3.0 pl1-86
Cron
Version 3.0 pl1-87
Cron
Version 3.0 pl1-88
Cron
Version 3.0 pl1-89
Cron
Version 3.0 pl1-90
Cron
Version 3.0 pl1-91
Cron
Version 3.0 pl1-92
Cron
Version 3.0 pl1-93
Cron
Version 3.0 pl1-94
Cron
Version 3.0 pl1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Debian Linux
Version 8.0
Debian Linux
Version 9.0

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (10)

Source: cve@mitre.org
ExploitMailing ListVendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Mailing ListPatchVendor Advisory
Source: cve@mitre.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.