Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by open()ing a "pesky pipe" (such as passing "commands|" as a filename) or by passing arbitrary strings to eval().

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7117-1 advisory.

    Qualys discovered that needrestart passed unsanitized data to a library

    (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly use this issue to     execute arbitrary code as root. (CVE-2024-11003)

    Qualys discovered that the library libmodule-scandeps-perl incorrectly

    parsed perl code. This could allow a local attacker to execute arbitrary shell commands. (CVE-2024-10224)

    Qualys discovered that needrestart incorrectly used the PYTHONPATH

    environment variable to spawn a new Python interpreter. A local attacker

    could possibly use this issue to execute arbitrary code as root.

    (CVE-2024-48990)

    Qualys discovered that needrestart incorrectly checked the path to the Python interpreter. A local     attacker could possibly use this issue to win a race condition and execute arbitrary code as root.
    (CVE-2024-48991)

    Qualys discovered that needrestart incorrectly used the RUBYLIB environment variable to spawn a new Ruby     interpreter. A local attacker could possibly use this issue to execute arbitrary code as root.
    (CVE-2024-48992)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-3958 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3958-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                 Salvatore Bonaccorso     November 19, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libmodule-scandeps-perl     Version        : 1.30-1+deb11u1     CVE ID         : CVE-2024-10224

    The Qualys Threat Research Unit discovered that libmodule-scandeps-perl,     a Perl module to recursively scan Perl code for dependencies, allows an     attacker to execute arbitrary shell commands via specially crafted file     names.

    Details can be found in the Qualys advisory at     https://www.qualys.com/2024/11/19/needrestart/needrestart.txt

    For Debian 11 bullseye, this problem has been fixed in version     1.30-1+deb11u1.

    We recommend that you upgrade your libmodule-scandeps-perl packages.

    For the detailed security status of libmodule-scandeps-perl please refer     to its security tracker page at:
    https://security-tracker.debian.org/tracker/libmodule-scandeps-perl

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5816 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5816-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 19, 2024                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : libmodule-scandeps-perl     CVE ID         : CVE-2024-10224

    The Qualys Threat Research Unit discovered that libmodule-scandeps-perl,     a Perl module to recursively scan Perl code for dependencies, allows an     attacker to execute arbitrary shell commands via specially crafted file     names.

    Details can be found in the Qualys advisory at     https://www.qualys.com/2024/11/19/needrestart/needrestart.txt

    For the stable distribution (bookworm), this problem has been fixed in     version 1.31-2+deb12u1.

    We recommend that you upgrade your libmodule-scandeps-perl packages.

    For the detailed security status of libmodule-scandeps-perl please refer     to its security tracker page at:
    https://security-tracker.debian.org/tracker/libmodule-scandeps-perl

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211621	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : needrestart and Module::ScanDeps vulnerabilities (USN-7117-1)	Nessus	Ubuntu Local Security Checks	high
211605	Debian dla-3958 : libmodule-scandeps-perl - security update	Nessus	Debian Local Security Checks	medium
211603	Debian dsa-5816 : libmodule-scandeps-perl - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2024-10224

medium

Tenable Plugins

high

medium

medium