Vulnerability: Denial of Service in Vixie Cron due to Unchecked calloc Return Value

Vulnerability: Denial of Service in Vixie Cron due to Unchecked calloc Return Value

CVE-2019-9704 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.

Learn more about our Cis Benchmark Audit For Debian Linux.