CVE-2019-9705
cron: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption)...
CVE-2019-9705 is fixed in cron on 1 platform by cron 3.0pl1-128.1ubuntu1.1 (version 3.0pl1-128.1ubuntu1.1), released March 11, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0037
30th percentile
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| cron · Ubuntu 18.04.6 LTS (bionic) | 3.0pl1-128.1ubuntu1.1 | cron 3.0pl1-128.1ubuntu1.1 | Mar 11, 2019 |