CVE-2019-9706

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.

This issue did not affect the versions of vixie-cron as shipped with Red Hat Enterprise Linux 5 as they did not include the vulnerable code. This issue did not affect the versions of cronie as shipped with Red Hat Enterprise Linux 6, 7, and 8 as they did not include the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.