CVE-2023-29145: High severity malwarebytes endpoint detection and response vulnerability
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29145?
CVE-2023-29145 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2023-29145?
To fix CVE-2023-29145, update Malwarebytes EDR for Linux to a version above 1.0.11.
What software is affected by CVE-2023-29145?
CVE-2023-29145 affects Malwarebytes EDR up to version 1.0.11 and Malwarebytes Anti-Malware up to version 1.0.14 on Linux.
What can an attacker do with CVE-2023-29145?
An attacker can exploit CVE-2023-29145 to execute arbitrary code by manipulating the LD_LIBRARY_PATH or LD_PRELOAD environment variables.
Is there a workaround for CVE-2023-29145?
As of now, there are no officially documented workarounds for CVE-2023-29145 other than updating the software.