CVE-2023-5936: Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges.
By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5936?
CVE-2023-5936 is a critical vulnerability that allows local users to execute arbitrary code with root privileges.
How do I fix CVE-2023-5936?
To mitigate CVE-2023-5936, update Arc software to version 1.6.0 or later, which addresses the issue of unsafe temporary file privileges.
Who is affected by CVE-2023-5936?
Users of Arc versions below 1.6.0 on Unix systems, including Linux and MacOS, are affected by CVE-2023-5936.
What are the consequences of CVE-2023-5936 exploitation?
Exploitation of CVE-2023-5936 can result in arbitrary code execution with elevated privileges, compromising system integrity.
Is there a workaround for CVE-2023-5936?
As a temporary workaround for CVE-2023-5936, restrict access to the temporary files used by Arc until the software is updated.