Vulnerabilities > Cron Project

DATE CVE VULNERABILITY TITLE RISK
2019-03-12 CVE-2019-9705 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
local
low complexity
cron-project debian fedoraproject CWE-770
5.5
2019-03-12 CVE-2019-9704 Unchecked Return Value vulnerability in multiple products
Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.
local
low complexity
cron-project fedoraproject debian CWE-252
5.5
2017-06-09 CVE-2017-9525 Link Following vulnerability in multiple products
In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.
local
low complexity
cron-project debian CWE-59
6.7