high7.8
CVE-2023-29145
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code e…
Impact
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Malwarebytes | Endpoint Detection And Response | through 1.0.11 |
| Malwarebytes | Malwarebytes | through 1.0.14 |