Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service

🗓️ 27 Jan 2026 00:00:00Reported by Broadcom Security ResponseType

Vixie Cron before 3.0pl1-133 Debian allows local DoS via large crontab files due to unchecked calloc and unlimited lines.

Reporter	Title	Published	Views	Family All 90
BDU FSTEC	The vulnerability of the scheduler daemon in UNIX-like operating systems, Cron, related to pointer arithmetic errors, allows a malicious actor to trigger a service failure.	26 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the task scheduler daemon in UNIX-like operating systems, Cron, related to the allocation of unlimited memory, allows a intruder to trigger a service failure.	3 Oct 202200:00	–	bdu_fstec
Broadcom	Brocade Fabric OS (10.x and 9.2.x Releases) Vulnerability Disclosures	27 Sep 202400:00	–	broadcom
Cloud Foundry	USN-5259-2: Cron vulnerabilities \| Cloud Foundry	29 Jul 202200:00	–	cloudfoundry
Cloud Foundry	USN-5259-3: Cron regression \| Cloud Foundry	29 Jul 202200:00	–	cloudfoundry
CNVD	Vixie cron denial of service vulnerability (CNVD-2019-13244)	12 Mar 201900:00	–	cnvd
CNVD	Vixie cron denial of service vulnerability	12 Mar 201900:00	–	cnvd
CVE	CVE-2019-9704	12 Mar 201900:00	–	cve
CVE	CVE-2019-9705	12 Mar 201900:00	–	cve
Cvelist	CVE-2019-9704	12 Mar 201900:00	–	cvelist