CVE-2019-9704

A vulnerability was found in the Vixie Cron package, caused by improper validation of the return value from the calloc function. A local attacker could exploit this flaw by using a specially crafted crontab file, resulting in a denial of service condition and potentially crashing the service.

This vulnerability was rated as LOW severity because it requires local access and a specially crafted crontab file to exploit. While it does not lead to system compromise, it can cause the cron service to crash temporarily

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.