CVE-2023-5557

{"id": "CVE-2023-5557", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 5.3, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.0}]}, "published": "2023-10-13T02:15:11.077", "references": [{"url": "https://access.redhat.com/errata/RHSA-2023:7712", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7713", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7730", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7731", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7732", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7733", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7739", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7744", "source": "[email protected]"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-5557", "tags": ["Third Party Advisory"], "source": "[email protected]"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243096", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7712", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7713", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7730", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7731", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7732", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7733", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7739", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/errata/RHSA-2023:7744", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://access.redhat.com/security/cve/CVE-2023-5557", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243096", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-693"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en el paquete tracker-miners. Una debilidad en la sandbox permite que un archivo creado con fines malintencionados ejecute c\u00f3digo fuera de la sandbox si el proceso de extracci\u00f3n del rastreador se ha visto comprometido primero por una vulnerabilidad separada."}], "lastModified": "2024-11-21T08:42:00.620", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gnome:tracker_miners:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A427232-258E-490A-9302-48D4F2E09BA2", "versionEndExcluding": "3.3.2"}, {"criteria": "cpe:2.3:a:gnome:tracker_miners:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "032462FC-57CE-40D7-BABC-200E0823F143", "versionEndExcluding": "3.4.5", "versionStartIncluding": "3.4.0"}, {"criteria": "cpe:2.3:a:gnome:tracker_miners:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5563BCA-BDDE-4B94-B063-04B87F145015", "versionEndExcluding": "3.5.3", "versionStartIncluding": "3.5.0"}, {"criteria": "cpe:2.3:a:gnome:tracker_miners:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22F6C99E-72AE-46FA-AC47-36F1C9CF6186", "versionEndExcluding": "3.6.1", "versionStartIncluding": "3.6.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}