CVE-2023-33865

Опубликовано: 07 июн. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.

Ссылки

http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2023/Jun/2
Exploit
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00023.html
Third Party Advisory
https://renderdoc.org/
Product
https://security.gentoo.org/glsa/202311-10
https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2023/Jun/2
Exploit
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/07/msg00023.html
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/12/msg00008.html
https://renderdoc.org/
Product
https://security.gentoo.org/glsa/202311-10
https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:renderdoc:renderdoc:*:*:*:*:*:*:*:*

Версия до 1.27 (исключая)

EPSS

Процентиль: 7%

0.00027

Низкий

7.8 High

CVSS3

Дефекты

CWE-59

Связанные уязвимости

CVE-2023-33865

CVSS3: 7.8

ubuntu

больше 2 лет назад

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.

CVE-2023-33865

CVSS3: 7.8

debian

больше 2 лет назад

RenderDoc before 1.27 allows local privilege escalation via a symlink ...

GHSA-h6fr-rh94-prmv

CVSS3: 7.8

github

больше 2 лет назад

RenderDoc through 1.26 allows local privilege escalation via a symlink attack.

BDU:2023-03384

CVSS3: 7.8

fstec

больше 2 лет назад

Уязвимость библиотеки librenderdoc.so автономного графического отладчика RenderDoc, позволяющая нарушителю позволить нарушителю повысить свои привилегии

openSUSE-SU-2023:0253-1

suse-cvrf

больше 2 лет назад

Security update for renderdoc

EPSS

Процентиль: 7%

0.00027

Низкий

7.8 High

CVSS3

Дефекты

CWE-59