CVE-2023-29145
CVE-2023-29145
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
30 Jun 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →