Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmmp-296p-3p5g

Опубликовано: 30 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

EPSS

Процентиль: 22%
0.00072
Низкий

7.8 High

CVSS3

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

EPSS

Процентиль: 22%
0.00072
Низкий

7.8 High

CVSS3

Дефекты

CWE-640