Cron Project vulnerabilities

3 vulnerabilities

Known vulnerabilities in Cron Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
  • Cron3 vulnerabilities
6.9CVE-2017-9525cron_projectcron+4
EPSS score
0.55%
In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.5.5CVE-2019-9704cron_projectcron+5
EPSS score
0.36%
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.5.5CVE-2019-9705cron_projectcron+4
EPSS score
0.37%
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.