CVE-2024-36587

Impact

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md
• https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md