CVE:CVE-2019-9704
CNNVD:CNNVD-201903-339
Vixie Cron是一款用于执行计划任务的守护进程。
Vixie Cron 3.0pl1-133之前版本中存在输入验证漏洞，该漏洞源于程序未检查‘calloc’函数的返回值。本地攻击者可借助较大的crontab文件利用该漏洞造成拒绝服务（程序崩溃）。
solution:Upgrade cron_project cron to a higher version than 3.0pl1-133,and avoid the version (,3.0pl1-133); Upgrade fedoraproject fedora to a higher version than 29,and avoid the version 29; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0