Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cron | Mar 22, 2019 | Mar 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cronieUpgrade cronie-anacronUpgrade cronie-noanacron | Dec 4, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cronieUpgrade cronie-noanacronUpgrade cronie-anacron | Dec 18, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cronie-anacronUpgrade cronie-noanacronUpgrade cronie | Sep 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cronie-anacronUpgrade cronie-noanacronUpgrade cronie | Nov 19, 2019 | Mar 12, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2019 |
| Suse | — | Upgrade cronUpgrade cronie-anacronUpgrade cronie | Jun 6, 2019 | Mar 11, 2019 |
| Ubuntu | — | Upgrade cron (Ubuntu Pro)Upgrade cron | Feb 2, 2022 | Mar 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub