CVE-2019-9706
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
| Software | From | Fixed in |
|---|---|---|
| debian / cron | 3.0 | 3.0.x |
| debian / cron | 3.0-pl1 | 3.0-pl1.x |
| debian / cron | 3.0-pl1-100 | 3.0-pl1-100.x |
| debian / cron | 3.0-pl1-101 | 3.0-pl1-101.x |
| debian / cron | 3.0-pl1-102 | 3.0-pl1-102.x |
| debian / cron | 3.0-pl1-103 | 3.0-pl1-103.x |
| debian / cron | 3.0-pl1-104 | 3.0-pl1-104.x |
| debian / cron | 3.0-pl1-105 | 3.0-pl1-105.x |
| debian / cron | 3.0-pl1-106 | 3.0-pl1-106.x |
| debian / cron | 3.0-pl1-107 | 3.0-pl1-107.x |
| debian / cron | 3.0-pl1-108 | 3.0-pl1-108.x |
| debian / cron | 3.0-pl1-109 | 3.0-pl1-109.x |
| debian / cron | 3.0-pl1-110 | 3.0-pl1-110.x |
| debian / cron | 3.0-pl1-111 | 3.0-pl1-111.x |
| debian / cron | 3.0-pl1-112 | 3.0-pl1-112.x |
| debian / cron | 3.0-pl1-113 | 3.0-pl1-113.x |
| debian / cron | 3.0-pl1-114 | 3.0-pl1-114.x |
| debian / cron | 3.0-pl1-115 | 3.0-pl1-115.x |
| debian / cron | 3.0-pl1-116 | 3.0-pl1-116.x |
| debian / cron | 3.0-pl1-117 | 3.0-pl1-117.x |
| debian / cron | 3.0-pl1-118 | 3.0-pl1-118.x |
| debian / cron | 3.0-pl1-119 | 3.0-pl1-119.x |
| debian / cron | 3.0-pl1-120 | 3.0-pl1-120.x |
| debian / cron | 3.0-pl1-121 | 3.0-pl1-121.x |
| debian / cron | 3.0-pl1-122 | 3.0-pl1-122.x |
| debian / cron | 3.0-pl1-123 | 3.0-pl1-123.x |
| debian / cron | 3.0-pl1-124 | 3.0-pl1-124.x |
| debian / cron | 3.0-pl1-124.1 | 3.0-pl1-124.1.x |
| debian / cron | 3.0-pl1-124.2 | 3.0-pl1-124.2.x |
| debian / cron | 3.0-pl1-125 | 3.0-pl1-125.x |
| debian / cron | 3.0-pl1-126 | 3.0-pl1-126.x |
| debian / cron | 3.0-pl1-127 | 3.0-pl1-127.x |
| debian / cron | 3.0-pl1-128 | 3.0-pl1-128.x |
| debian / cron | 3.0-pl1-130 | 3.0-pl1-130.x |
| debian / cron | 3.0-pl1-131 | 3.0-pl1-131.x |
| debian / cron | 3.0-pl1-132 | 3.0-pl1-132.x |
| debian / cron | 3.0-pl1-37 | 3.0-pl1-37.x |
| debian / cron | 3.0-pl1-38 | 3.0-pl1-38.x |
| debian / cron | 3.0-pl1-39 | 3.0-pl1-39.x |
| debian / cron | 3.0-pl1-40 | 3.0-pl1-40.x |
| debian / cron | 3.0-pl1-41 | 3.0-pl1-41.x |
| debian / cron | 3.0-pl1-42 | 3.0-pl1-42.x |
| debian / cron | 3.0-pl1-43 | 3.0-pl1-43.x |
| debian / cron | 3.0-pl1-44 | 3.0-pl1-44.x |
| debian / cron | 3.0-pl1-45 | 3.0-pl1-45.x |
| debian / cron | 3.0-pl1-46 | 3.0-pl1-46.x |
| debian / cron | 3.0-pl1-47 | 3.0-pl1-47.x |
| debian / cron | 3.0-pl1-48 | 3.0-pl1-48.x |
| debian / cron | 3.0-pl1-49 | 3.0-pl1-49.x |
| debian / cron | 3.0-pl1-50 | 3.0-pl1-50.x |
| debian / cron | 3.0-pl1-50.1 | 3.0-pl1-50.1.x |
| debian / cron | 3.0-pl1-50.2 | 3.0-pl1-50.2.x |
| debian / cron | 3.0-pl1-51 | 3.0-pl1-51.x |
| debian / cron | 3.0-pl1-53 | 3.0-pl1-53.x |
| debian / cron | 3.0-pl1-54 | 3.0-pl1-54.x |
| debian / cron | 3.0-pl1-55 | 3.0-pl1-55.x |
| debian / cron | 3.0-pl1-56 | 3.0-pl1-56.x |
| debian / cron | 3.0-pl1-57 | 3.0-pl1-57.x |
| debian / cron | 3.0-pl1-57.2 | 3.0-pl1-57.2.x |
| debian / cron | 3.0-pl1-57.3 | 3.0-pl1-57.3.x |
| debian / cron | 3.0-pl1-58 | 3.0-pl1-58.x |
| debian / cron | 3.0-pl1-59 | 3.0-pl1-59.x |
| debian / cron | 3.0-pl1-60 | 3.0-pl1-60.x |
| debian / cron | 3.0-pl1-61 | 3.0-pl1-61.x |
| debian / cron | 3.0-pl1-62 | 3.0-pl1-62.x |
| debian / cron | 3.0-pl1-63 | 3.0-pl1-63.x |
| debian / cron | 3.0-pl1-64 | 3.0-pl1-64.x |
| debian / cron | 3.0-pl1-65 | 3.0-pl1-65.x |
| debian / cron | 3.0-pl1-66 | 3.0-pl1-66.x |
| debian / cron | 3.0-pl1-67 | 3.0-pl1-67.x |
| debian / cron | 3.0-pl1-68 | 3.0-pl1-68.x |
| debian / cron | 3.0-pl1-69 | 3.0-pl1-69.x |
| debian / cron | 3.0-pl1-70 | 3.0-pl1-70.x |
| debian / cron | 3.0-pl1-71 | 3.0-pl1-71.x |
| debian / cron | 3.0-pl1-72 | 3.0-pl1-72.x |
| debian / cron | 3.0-pl1-73 | 3.0-pl1-73.x |
| debian / cron | 3.0-pl1-74 | 3.0-pl1-74.x |
| debian / cron | 3.0-pl1-75 | 3.0-pl1-75.x |
| debian / cron | 3.0-pl1-76 | 3.0-pl1-76.x |
| debian / cron | 3.0-pl1-77 | 3.0-pl1-77.x |
| debian / cron | 3.0-pl1-78 | 3.0-pl1-78.x |
| debian / cron | 3.0-pl1-79 | 3.0-pl1-79.x |
| debian / cron | 3.0-pl1-80 | 3.0-pl1-80.x |
| debian / cron | 3.0-pl1-81 | 3.0-pl1-81.x |
| debian / cron | 3.0-pl1-82 | 3.0-pl1-82.x |
| debian / cron | 3.0-pl1-83 | 3.0-pl1-83.x |
| debian / cron | 3.0-pl1-84 | 3.0-pl1-84.x |
| debian / cron | 3.0-pl1-85 | 3.0-pl1-85.x |
| debian / cron | 3.0-pl1-86 | 3.0-pl1-86.x |
| debian / cron | 3.0-pl1-87 | 3.0-pl1-87.x |
| debian / cron | 3.0-pl1-88 | 3.0-pl1-88.x |
| debian / cron | 3.0-pl1-89 | 3.0-pl1-89.x |
| debian / cron | 3.0-pl1-90 | 3.0-pl1-90.x |
| debian / cron | 3.0-pl1-91 | 3.0-pl1-91.x |
| debian / cron | 3.0-pl1-92 | 3.0-pl1-92.x |
| debian / cron | 3.0-pl1-93 | 3.0-pl1-93.x |
| debian / cron | 3.0-pl1-94 | 3.0-pl1-94.x |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=809167
- https://lists.debian.org/debian-lts-announce/2019/03/msg00025.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00029.html
- https://packages.qa.debian.org/c/cron/news/20190311T170403Z.html
- https://salsa.debian.org/debian/cron/commit/40791b93
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime