CVE-2023-29147: Medium severity malwarebytes endpoint detection and response vulnerability
Published Jun 30, 2023
·Updated
In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier.
Affected Software
2 affected components
Malwarebytes Endpoint Detection And Response Linux<=1.0.11
Malwarebytes Malwarebytes Linux<=1.0.14
Event History
Jun 30, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-29147?
CVE-2023-29147 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2023-29147?
To mitigate CVE-2023-29147, users should upgrade Malwarebytes EDR to version 1.0.12 or later.
3
What software is affected by CVE-2023-29147?
CVE-2023-29147 affects Malwarebytes EDR versions up to 1.0.11 and Malwarebytes versions up to 1.0.14.
4
What kind of vulnerability is CVE-2023-29147?
CVE-2023-29147 is a file detection bypass vulnerability in Malwarebytes EDR.
5
Can CVE-2023-29147 affect my system?
Yes, CVE-2023-29147 can potentially allow malware to evade detection on systems running the affected Malwarebytes software.