https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-9706.htmlhttps://patchthecve.com/cve/CVE-2019-9706.htmlWed, 17 Jun 2026 02:44:12 +0000MEDIUM 5.5: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (use-after-free and daemon crash) because of a force_rescan_user error.https://patchthecve.com/cve/CVE-2019-9705.htmlhttps://patchthecve.com/cve/CVE-2019-9705.htmlWed, 17 Jun 2026 02:44:12 +0000MEDIUM 5.5: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.https://patchthecve.com/cve/CVE-2019-9704.htmlhttps://patchthecve.com/cve/CVE-2019-9704.htmlWed, 17 Jun 2026 02:44:12 +0000MEDIUM 5.5: Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked.https://patchthecve.com/cve/CVE-2017-9525.htmlhttps://patchthecve.com/cve/CVE-2017-9525.htmlWed, 17 Jun 2026 01:28:18 +0000MEDIUM 6.7: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks against unsafe usage of the chown and chmod programs.