CVE-2019-9706: Use After Free
First published: Sun Dec 27 2015(Updated: )
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian Cron | =3.0 | |
| Debian Cron | =3.0-pl1 | |
| Debian Cron | =3.0-pl1-100 | |
| Debian Cron | =3.0-pl1-101 | |
| Debian Cron | =3.0-pl1-102 | |
| Debian Cron | =3.0-pl1-103 | |
| Debian Cron | =3.0-pl1-104 | |
| Debian Cron | =3.0-pl1-105 | |
| Debian Cron | =3.0-pl1-106 | |
| Debian Cron | =3.0-pl1-107 | |
| Debian Cron | =3.0-pl1-108 | |
| Debian Cron | =3.0-pl1-109 | |
| Debian Cron | =3.0-pl1-110 | |
| Debian Cron | =3.0-pl1-111 | |
| Debian Cron | =3.0-pl1-112 | |
| Debian Cron | =3.0-pl1-113 | |
| Debian Cron | =3.0-pl1-114 | |
| Debian Cron | =3.0-pl1-115 | |
| Debian Cron | =3.0-pl1-116 | |
| Debian Cron | =3.0-pl1-117 | |
| Debian Cron | =3.0-pl1-118 | |
| Debian Cron | =3.0-pl1-119 | |
| Debian Cron | =3.0-pl1-120 | |
| Debian Cron | =3.0-pl1-121 | |
| Debian Cron | =3.0-pl1-122 | |
| Debian Cron | =3.0-pl1-123 | |
| Debian Cron | =3.0-pl1-124 | |
| Debian Cron | =3.0-pl1-124.1 | |
| Debian Cron | =3.0-pl1-124.2 | |
| Debian Cron | =3.0-pl1-125 | |
| Debian Cron | =3.0-pl1-126 | |
| Debian Cron | =3.0-pl1-127 | |
| Debian Cron | =3.0-pl1-128 | |
| Debian Cron | =3.0-pl1-130 | |
| Debian Cron | =3.0-pl1-131 | |
| Debian Cron | =3.0-pl1-132 | |
| Debian Cron | =3.0-pl1-37 | |
| Debian Cron | =3.0-pl1-38 | |
| Debian Cron | =3.0-pl1-39 | |
| Debian Cron | =3.0-pl1-40 | |
| Debian Cron | =3.0-pl1-41 | |
| Debian Cron | =3.0-pl1-42 | |
| Debian Cron | =3.0-pl1-43 | |
| Debian Cron | =3.0-pl1-44 | |
| Debian Cron | =3.0-pl1-45 | |
| Debian Cron | =3.0-pl1-46 | |
| Debian Cron | =3.0-pl1-47 | |
| Debian Cron | =3.0-pl1-48 | |
| Debian Cron | =3.0-pl1-49 | |
| Debian Cron | =3.0-pl1-50 | |
| Debian Cron | =3.0-pl1-50.1 | |
| Debian Cron | =3.0-pl1-50.2 | |
| Debian Cron | =3.0-pl1-51 | |
| Debian Cron | =3.0-pl1-53 | |
| Debian Cron | =3.0-pl1-54 | |
| Debian Cron | =3.0-pl1-55 | |
| Debian Cron | =3.0-pl1-56 | |
| Debian Cron | =3.0-pl1-57 | |
| Debian Cron | =3.0-pl1-57.2 | |
| Debian Cron | =3.0-pl1-57.3 | |
| Debian Cron | =3.0-pl1-58 | |
| Debian Cron | =3.0-pl1-59 | |
| Debian Cron | =3.0-pl1-60 | |
| Debian Cron | =3.0-pl1-61 | |
| Debian Cron | =3.0-pl1-62 | |
| Debian Cron | =3.0-pl1-63 | |
| Debian Cron | =3.0-pl1-64 | |
| Debian Cron | =3.0-pl1-65 | |
| Debian Cron | =3.0-pl1-66 | |
| Debian Cron | =3.0-pl1-67 | |
| Debian Cron | =3.0-pl1-68 | |
| Debian Cron | =3.0-pl1-69 | |
| Debian Cron | =3.0-pl1-70 | |
| Debian Cron | =3.0-pl1-71 | |
| Debian Cron | =3.0-pl1-72 | |
| Debian Cron | =3.0-pl1-73 | |
| Debian Cron | =3.0-pl1-74 | |
| Debian Cron | =3.0-pl1-75 | |
| Debian Cron | =3.0-pl1-76 | |
| Debian Cron | =3.0-pl1-77 | |
| Debian Cron | =3.0-pl1-78 | |
| Debian Cron | =3.0-pl1-79 | |
| Debian Cron | =3.0-pl1-80 | |
| Debian Cron | =3.0-pl1-81 | |
| Debian Cron | =3.0-pl1-82 | |
| Debian Cron | =3.0-pl1-83 | |
| Debian Cron | =3.0-pl1-84 | |
| Debian Cron | =3.0-pl1-85 | |
| Debian Cron | =3.0-pl1-86 | |
| Debian Cron | =3.0-pl1-87 | |
| Debian Cron | =3.0-pl1-88 | |
| Debian Cron | =3.0-pl1-89 | |
| Debian Cron | =3.0-pl1-90 | |
| Debian Cron | =3.0-pl1-91 | |
| Debian Cron | =3.0-pl1-92 | |
| Debian Cron | =3.0-pl1-93 | |
| Debian Cron | =3.0-pl1-94 | |
| Debian Debian Linux | =8.0 | |
| Debian Debian Linux | =9.0 | |
| debian/cron | <=3.0pl1-127+deb8u1<=3.0pl1-124 | |
| =3.0 | ||
| =3.0-pl1 | ||
| =3.0-pl1-100 | ||
| =3.0-pl1-101 | ||
| =3.0-pl1-102 | ||
| =3.0-pl1-103 | ||
| =3.0-pl1-104 | ||
| =3.0-pl1-105 | ||
| =3.0-pl1-106 | ||
| =3.0-pl1-107 | ||
| =3.0-pl1-108 | ||
| =3.0-pl1-109 | ||
| =3.0-pl1-110 | ||
| =3.0-pl1-111 | ||
| =3.0-pl1-112 | ||
| =3.0-pl1-113 | ||
| =3.0-pl1-114 | ||
| =3.0-pl1-115 | ||
| =3.0-pl1-116 | ||
| =3.0-pl1-117 | ||
| =3.0-pl1-118 | ||
| =3.0-pl1-119 | ||
| =3.0-pl1-120 | ||
| =3.0-pl1-121 | ||
| =3.0-pl1-122 | ||
| =3.0-pl1-123 | ||
| =3.0-pl1-124 | ||
| =3.0-pl1-124.1 | ||
| =3.0-pl1-124.2 | ||
| =3.0-pl1-125 | ||
| =3.0-pl1-126 | ||
| =3.0-pl1-127 | ||
| =3.0-pl1-128 | ||
| =3.0-pl1-130 | ||
| =3.0-pl1-131 | ||
| =3.0-pl1-132 | ||
| =3.0-pl1-37 | ||
| =3.0-pl1-38 | ||
| =3.0-pl1-39 | ||
| =3.0-pl1-40 | ||
| =3.0-pl1-41 | ||
| =3.0-pl1-42 | ||
| =3.0-pl1-43 | ||
| =3.0-pl1-44 | ||
| =3.0-pl1-45 | ||
| =3.0-pl1-46 | ||
| =3.0-pl1-47 | ||
| =3.0-pl1-48 | ||
| =3.0-pl1-49 | ||
| =3.0-pl1-50 | ||
| =3.0-pl1-50.1 | ||
| =3.0-pl1-50.2 | ||
| =3.0-pl1-51 | ||
| =3.0-pl1-53 | ||
| =3.0-pl1-54 | ||
| =3.0-pl1-55 | ||
| =3.0-pl1-56 | ||
| =3.0-pl1-57 | ||
| =3.0-pl1-57.2 | ||
| =3.0-pl1-57.3 | ||
| =3.0-pl1-58 | ||
| =3.0-pl1-59 | ||
| =3.0-pl1-60 | ||
| =3.0-pl1-61 | ||
| =3.0-pl1-62 | ||
| =3.0-pl1-63 | ||
| =3.0-pl1-64 | ||
| =3.0-pl1-65 | ||
| =3.0-pl1-66 | ||
| =3.0-pl1-67 | ||
| =3.0-pl1-68 | ||
| =3.0-pl1-69 | ||
| =3.0-pl1-70 | ||
| =3.0-pl1-71 | ||
| =3.0-pl1-72 | ||
| =3.0-pl1-73 | ||
| =3.0-pl1-74 | ||
| =3.0-pl1-75 | ||
| =3.0-pl1-76 | ||
| =3.0-pl1-77 | ||
| =3.0-pl1-78 | ||
| =3.0-pl1-79 | ||
| =3.0-pl1-80 | ||
| =3.0-pl1-81 | ||
| =3.0-pl1-82 | ||
| =3.0-pl1-83 | ||
| =3.0-pl1-84 | ||
| =3.0-pl1-85 | ||
| =3.0-pl1-86 | ||
| =3.0-pl1-87 | ||
| =3.0-pl1-88 | ||
| =3.0-pl1-89 | ||
| =3.0-pl1-90 | ||
| =3.0-pl1-91 | ||
| =3.0-pl1-92 | ||
| =3.0-pl1-93 | ||
| =3.0-pl1-94 | ||
| =8.0 | ||
| =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://anonscm.debian.org/cgit/pkg-cron/pkg-cron.git/tree/database.c?h=debian/3.0pl1-128
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809167
- https://lists.debian.org/debian-lts-announce/2019/03/msg00025.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00029.html
- https://packages.qa.debian.org/c/cron/news/20190311T170403Z.html
- https://salsa.debian.org/debian/cron/commit/40791b93
- collector/nvd-index
- agent/references
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- collector/debian-bugs
- source/Debian
- alias/CVE-2019-9706
- agent/software-canonical-lookup
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/debian
- canonical/debian cron
- version/debian cron/3.0
- version/debian cron/3.0-pl1
- version/debian cron/3.0-pl1-100
- version/debian cron/3.0-pl1-101
- version/debian cron/3.0-pl1-102
- version/debian cron/3.0-pl1-103
- version/debian cron/3.0-pl1-104
- version/debian cron/3.0-pl1-105
- version/debian cron/3.0-pl1-106
- version/debian cron/3.0-pl1-107
- version/debian cron/3.0-pl1-108
- version/debian cron/3.0-pl1-109
- version/debian cron/3.0-pl1-110
- version/debian cron/3.0-pl1-111
- version/debian cron/3.0-pl1-112
- version/debian cron/3.0-pl1-113
- version/debian cron/3.0-pl1-114
- version/debian cron/3.0-pl1-115
- version/debian cron/3.0-pl1-116
- version/debian cron/3.0-pl1-117
- version/debian cron/3.0-pl1-118
- version/debian cron/3.0-pl1-119
- version/debian cron/3.0-pl1-120
- version/debian cron/3.0-pl1-121
- version/debian cron/3.0-pl1-122
- version/debian cron/3.0-pl1-123
- version/debian cron/3.0-pl1-124
- version/debian cron/3.0-pl1-124.1
- version/debian cron/3.0-pl1-124.2
- version/debian cron/3.0-pl1-125
- version/debian cron/3.0-pl1-126
- version/debian cron/3.0-pl1-127
- version/debian cron/3.0-pl1-128
- version/debian cron/3.0-pl1-130
- version/debian cron/3.0-pl1-131
- version/debian cron/3.0-pl1-132
- version/debian cron/3.0-pl1-37
- version/debian cron/3.0-pl1-38
- version/debian cron/3.0-pl1-39
- version/debian cron/3.0-pl1-40
- version/debian cron/3.0-pl1-41
- version/debian cron/3.0-pl1-42
- version/debian cron/3.0-pl1-43
- version/debian cron/3.0-pl1-44
- version/debian cron/3.0-pl1-45
- version/debian cron/3.0-pl1-46
- version/debian cron/3.0-pl1-47
- version/debian cron/3.0-pl1-48
- version/debian cron/3.0-pl1-49
- version/debian cron/3.0-pl1-50
- version/debian cron/3.0-pl1-50.1
- version/debian cron/3.0-pl1-50.2
- version/debian cron/3.0-pl1-51
- version/debian cron/3.0-pl1-53
- version/debian cron/3.0-pl1-54
- version/debian cron/3.0-pl1-55
- version/debian cron/3.0-pl1-56
- version/debian cron/3.0-pl1-57
- version/debian cron/3.0-pl1-57.2
- version/debian cron/3.0-pl1-57.3
- version/debian cron/3.0-pl1-58
- version/debian cron/3.0-pl1-59
- version/debian cron/3.0-pl1-60
- version/debian cron/3.0-pl1-61
- version/debian cron/3.0-pl1-62
- version/debian cron/3.0-pl1-63
- version/debian cron/3.0-pl1-64
- version/debian cron/3.0-pl1-65
- version/debian cron/3.0-pl1-66
- version/debian cron/3.0-pl1-67
- version/debian cron/3.0-pl1-68
- version/debian cron/3.0-pl1-69
- version/debian cron/3.0-pl1-70
- version/debian cron/3.0-pl1-71
- version/debian cron/3.0-pl1-72
- version/debian cron/3.0-pl1-73
- version/debian cron/3.0-pl1-74
- version/debian cron/3.0-pl1-75
- version/debian cron/3.0-pl1-76
- version/debian cron/3.0-pl1-77
- version/debian cron/3.0-pl1-78
- version/debian cron/3.0-pl1-79
- version/debian cron/3.0-pl1-80
- version/debian cron/3.0-pl1-81
- version/debian cron/3.0-pl1-82
- version/debian cron/3.0-pl1-83
- version/debian cron/3.0-pl1-84
- version/debian cron/3.0-pl1-85
- version/debian cron/3.0-pl1-86
- version/debian cron/3.0-pl1-87
- version/debian cron/3.0-pl1-88
- version/debian cron/3.0-pl1-89
- version/debian cron/3.0-pl1-90
- version/debian cron/3.0-pl1-91
- version/debian cron/3.0-pl1-92
- version/debian cron/3.0-pl1-93
- version/debian cron/3.0-pl1-94
- canonical/debian debian linux
- version/debian debian linux/8.0
- version/debian debian linux/9.0
- package-manager/debian