Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (memory consumption) via a large crontab file because an unlimited number of lines is accepted.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9705
Reference (s):
- BID:107378
- URL: http://www.securityfocus.com/bid/107378
- FEDORA:FEDORA-2019-7104a00054
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DU7HAUAQR4E4AEBPYLUV6FZ4PHKH6A2/
- https://salsa.debian.org/debian/cron/commit/26814a26