CVE-2023-5557
13.10.2023, 02:15
A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnome | tracker_miners | 𝑥 < 3.3.2 |
| gnome | tracker_miners | 3.4.0 ≤ 𝑥 < 3.4.5 |
| gnome | tracker_miners | 3.5.0 ≤ 𝑥 < 3.5.3 |
| gnome | tracker_miners | 3.6.0 ≤ 𝑥 < 3.6.1 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| tracker-miner-files |
| ||||||||||||||||||||||||
| tracker-miners |
|
Common Weakness Enumeration
References