CVE-2024-11003 is a high-severity vulnerability affecting needrestart_project needrestart versions prior to 3.8. It allows a local attacker to execute arbitrary shell commands due to unsanitized data being passed to an internal library. With a CVSS score of 7.8, this flaw presents a significant risk of privilege escalation, as it requires low privileges and no user interaction. While there are no known active exploits or public exploit code, the vulnerability has garnered substantial community discussion and media coverage, indicating a high level of awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.8CPE matchmatch criteria | cpe:2.3:a:needrestart_project:needrestart:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.