Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cron | Mar 22, 2019 | Mar 11, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade cronie-noanacronUpgrade cronieUpgrade cronie-anacron | Dec 4, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade cronie-noanacronUpgrade cronie-anacronUpgrade cronie | Dec 18, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade cronie-noanacronUpgrade cronieUpgrade cronie-anacron | Sep 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade cronie-noanacronUpgrade cronie-anacronUpgrade cronie | Nov 19, 2019 | Mar 12, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 12, 2019 |
| Suse | — | Upgrade cronUpgrade cronie-anacronUpgrade cronie | Jun 6, 2019 | Mar 11, 2019 |
| Ubuntu | — | Upgrade cronUpgrade cron (Ubuntu Pro) | Feb 2, 2022 | Mar 11, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub