CVEvulnerability

CVE-2023-29145

7.8 HIGH Published 2023-06-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-640

Description

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.

Affected configurations

• malwarebytes endpoint detection and response (<= 1.0.11) • malwarebytes malwarebytes (<= 1.0.14)

Related

Weakness · CWE (1)

  • CWE-640 Weak Password Recovery Mechanism for Forgotten Password weakness

References