CVE-2023-28144

Опубликовано: 14 мар. 2023

Источник: nvd

CVSS3: 7

EPSS Низкий

Описание

KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.

Ссылки

https://github.com/KDAB/hotspot/releases
Release Notes
https://www.openwall.com/lists/oss-security/2023/03/14/8
Exploit
Mailing List
Third Party Advisory
https://github.com/KDAB/hotspot/releases
Release Notes
https://www.openwall.com/lists/oss-security/2023/03/14/8
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kdab:hotspot:*:*:*:*:*:*:*:*

Версия от 1.3.0 (включая) до 1.4.1 (включая)

EPSS

Процентиль: 17%

0.00054

Низкий

7 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVE-2023-28144

CVSS3: 7

ubuntu

почти 3 года назад

KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.

CVE-2023-28144

CVSS3: 7

debian

почти 3 года назад

KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configura ...

GHSA-r4wr-r3pf-8cvw

CVSS3: 7

github

почти 3 года назад

KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.

EPSS

Процентиль: 17%

0.00054

Низкий

7 High

CVSS3

Дефекты

CWE-362