Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cron | Debian | 3.0 (including) | 3.0 (including) |
| Cron | Debian | 3.0-pl1 (including) | 3.0-pl1 (including) |
| Cron | Debian | 3.0-pl1-100 (including) | 3.0-pl1-100 (including) |
| Cron | Debian | 3.0-pl1-101 (including) | 3.0-pl1-101 (including) |
| Cron | Debian | 3.0-pl1-102 (including) | 3.0-pl1-102 (including) |
| Cron | Debian | 3.0-pl1-103 (including) | 3.0-pl1-103 (including) |
| Cron | Debian | 3.0-pl1-104 (including) | 3.0-pl1-104 (including) |
| Cron | Debian | 3.0-pl1-105 (including) | 3.0-pl1-105 (including) |
| Cron | Debian | 3.0-pl1-106 (including) | 3.0-pl1-106 (including) |
| Cron | Debian | 3.0-pl1-107 (including) | 3.0-pl1-107 (including) |
| Cron | Debian | 3.0-pl1-108 (including) | 3.0-pl1-108 (including) |
| Cron | Debian | 3.0-pl1-109 (including) | 3.0-pl1-109 (including) |
| Cron | Debian | 3.0-pl1-110 (including) | 3.0-pl1-110 (including) |
| Cron | Debian | 3.0-pl1-111 (including) | 3.0-pl1-111 (including) |
| Cron | Debian | 3.0-pl1-112 (including) | 3.0-pl1-112 (including) |
| Cron | Debian | 3.0-pl1-113 (including) | 3.0-pl1-113 (including) |
| Cron | Debian | 3.0-pl1-114 (including) | 3.0-pl1-114 (including) |
| Cron | Debian | 3.0-pl1-115 (including) | 3.0-pl1-115 (including) |
| Cron | Debian | 3.0-pl1-116 (including) | 3.0-pl1-116 (including) |
| Cron | Debian | 3.0-pl1-117 (including) | 3.0-pl1-117 (including) |
| Cron | Debian | 3.0-pl1-118 (including) | 3.0-pl1-118 (including) |
| Cron | Debian | 3.0-pl1-119 (including) | 3.0-pl1-119 (including) |
| Cron | Debian | 3.0-pl1-120 (including) | 3.0-pl1-120 (including) |
| Cron | Debian | 3.0-pl1-121 (including) | 3.0-pl1-121 (including) |
| Cron | Debian | 3.0-pl1-122 (including) | 3.0-pl1-122 (including) |
| Cron | Debian | 3.0-pl1-123 (including) | 3.0-pl1-123 (including) |
| Cron | Debian | 3.0-pl1-124 (including) | 3.0-pl1-124 (including) |
| Cron | Debian | 3.0-pl1-124.1 (including) | 3.0-pl1-124.1 (including) |
| Cron | Debian | 3.0-pl1-124.2 (including) | 3.0-pl1-124.2 (including) |
| Cron | Debian | 3.0-pl1-125 (including) | 3.0-pl1-125 (including) |
| Cron | Debian | 3.0-pl1-126 (including) | 3.0-pl1-126 (including) |
| Cron | Debian | 3.0-pl1-127 (including) | 3.0-pl1-127 (including) |
| Cron | Debian | 3.0-pl1-128 (including) | 3.0-pl1-128 (including) |
| Cron | Debian | 3.0-pl1-130 (including) | 3.0-pl1-130 (including) |
| Cron | Debian | 3.0-pl1-131 (including) | 3.0-pl1-131 (including) |
| Cron | Debian | 3.0-pl1-132 (including) | 3.0-pl1-132 (including) |
| Cron | Debian | 3.0-pl1-37 (including) | 3.0-pl1-37 (including) |
| Cron | Debian | 3.0-pl1-38 (including) | 3.0-pl1-38 (including) |
| Cron | Debian | 3.0-pl1-39 (including) | 3.0-pl1-39 (including) |
| Cron | Debian | 3.0-pl1-40 (including) | 3.0-pl1-40 (including) |
| Cron | Debian | 3.0-pl1-41 (including) | 3.0-pl1-41 (including) |
| Cron | Debian | 3.0-pl1-42 (including) | 3.0-pl1-42 (including) |
| Cron | Debian | 3.0-pl1-43 (including) | 3.0-pl1-43 (including) |
| Cron | Debian | 3.0-pl1-44 (including) | 3.0-pl1-44 (including) |
| Cron | Debian | 3.0-pl1-45 (including) | 3.0-pl1-45 (including) |
| Cron | Debian | 3.0-pl1-46 (including) | 3.0-pl1-46 (including) |
| Cron | Debian | 3.0-pl1-47 (including) | 3.0-pl1-47 (including) |
| Cron | Debian | 3.0-pl1-48 (including) | 3.0-pl1-48 (including) |
| Cron | Debian | 3.0-pl1-49 (including) | 3.0-pl1-49 (including) |
| Cron | Debian | 3.0-pl1-50 (including) | 3.0-pl1-50 (including) |
| Cron | Debian | 3.0-pl1-50.1 (including) | 3.0-pl1-50.1 (including) |
| Cron | Debian | 3.0-pl1-50.2 (including) | 3.0-pl1-50.2 (including) |
| Cron | Debian | 3.0-pl1-51 (including) | 3.0-pl1-51 (including) |
| Cron | Debian | 3.0-pl1-53 (including) | 3.0-pl1-53 (including) |
| Cron | Debian | 3.0-pl1-54 (including) | 3.0-pl1-54 (including) |
| Cron | Debian | 3.0-pl1-55 (including) | 3.0-pl1-55 (including) |
| Cron | Debian | 3.0-pl1-56 (including) | 3.0-pl1-56 (including) |
| Cron | Debian | 3.0-pl1-57 (including) | 3.0-pl1-57 (including) |
| Cron | Debian | 3.0-pl1-57.2 (including) | 3.0-pl1-57.2 (including) |
| Cron | Debian | 3.0-pl1-57.3 (including) | 3.0-pl1-57.3 (including) |
| Cron | Debian | 3.0-pl1-58 (including) | 3.0-pl1-58 (including) |
| Cron | Debian | 3.0-pl1-59 (including) | 3.0-pl1-59 (including) |
| Cron | Debian | 3.0-pl1-60 (including) | 3.0-pl1-60 (including) |
| Cron | Debian | 3.0-pl1-61 (including) | 3.0-pl1-61 (including) |
| Cron | Debian | 3.0-pl1-62 (including) | 3.0-pl1-62 (including) |
| Cron | Debian | 3.0-pl1-63 (including) | 3.0-pl1-63 (including) |
| Cron | Debian | 3.0-pl1-64 (including) | 3.0-pl1-64 (including) |
| Cron | Debian | 3.0-pl1-65 (including) | 3.0-pl1-65 (including) |
| Cron | Debian | 3.0-pl1-66 (including) | 3.0-pl1-66 (including) |
| Cron | Debian | 3.0-pl1-67 (including) | 3.0-pl1-67 (including) |
| Cron | Debian | 3.0-pl1-68 (including) | 3.0-pl1-68 (including) |
| Cron | Debian | 3.0-pl1-69 (including) | 3.0-pl1-69 (including) |
| Cron | Debian | 3.0-pl1-70 (including) | 3.0-pl1-70 (including) |
| Cron | Debian | 3.0-pl1-71 (including) | 3.0-pl1-71 (including) |
| Cron | Debian | 3.0-pl1-72 (including) | 3.0-pl1-72 (including) |
| Cron | Debian | 3.0-pl1-73 (including) | 3.0-pl1-73 (including) |
| Cron | Debian | 3.0-pl1-74 (including) | 3.0-pl1-74 (including) |
| Cron | Debian | 3.0-pl1-75 (including) | 3.0-pl1-75 (including) |
| Cron | Debian | 3.0-pl1-76 (including) | 3.0-pl1-76 (including) |
| Cron | Debian | 3.0-pl1-77 (including) | 3.0-pl1-77 (including) |
| Cron | Debian | 3.0-pl1-78 (including) | 3.0-pl1-78 (including) |
| Cron | Debian | 3.0-pl1-79 (including) | 3.0-pl1-79 (including) |
| Cron | Debian | 3.0-pl1-80 (including) | 3.0-pl1-80 (including) |
| Cron | Debian | 3.0-pl1-81 (including) | 3.0-pl1-81 (including) |
| Cron | Debian | 3.0-pl1-82 (including) | 3.0-pl1-82 (including) |
| Cron | Debian | 3.0-pl1-83 (including) | 3.0-pl1-83 (including) |
| Cron | Debian | 3.0-pl1-84 (including) | 3.0-pl1-84 (including) |
| Cron | Debian | 3.0-pl1-85 (including) | 3.0-pl1-85 (including) |
| Cron | Debian | 3.0-pl1-86 (including) | 3.0-pl1-86 (including) |
| Cron | Debian | 3.0-pl1-87 (including) | 3.0-pl1-87 (including) |
| Cron | Debian | 3.0-pl1-88 (including) | 3.0-pl1-88 (including) |
| Cron | Debian | 3.0-pl1-89 (including) | 3.0-pl1-89 (including) |
| Cron | Debian | 3.0-pl1-90 (including) | 3.0-pl1-90 (including) |
| Cron | Debian | 3.0-pl1-91 (including) | 3.0-pl1-91 (including) |
| Cron | Debian | 3.0-pl1-92 (including) | 3.0-pl1-92 (including) |
| Cron | Debian | 3.0-pl1-93 (including) | 3.0-pl1-93 (including) |
| Cron | Debian | 3.0-pl1-94 (including) | 3.0-pl1-94 (including) |
| Cron | Ubuntu | bionic | * |
| Cron | Ubuntu | cosmic | * |
| Cron | Ubuntu | disco | * |
| Cron | Ubuntu | esm-infra-legacy/trusty | * |
| Cron | Ubuntu | esm-infra/bionic | * |
| Cron | Ubuntu | esm-infra/xenial | * |
| Cron | Ubuntu | precise/esm | * |
| Cron | Ubuntu | trusty | * |
| Cron | Ubuntu | trusty/esm | * |
| Cron | Ubuntu | upstream | * |
| Cron | Ubuntu | xenial | * |