USN-6434-1: PMIx vulnerability
Francois Diakhate discovered that PMIx did not properly handle race conditions in the pmix library, which could lead to unwanted privilege escalation. An attacker could possibly use this issue to obtain ownership of an arbitrary file on the filesystem, under the default configuration of the application.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of USN-6434-1?
The vulnerability ID of USN-6434-1 is CVE-2023-41915.
What is the severity of CVE-2023-41915?
The severity of CVE-2023-41915 is not provided in the information.
What software is affected by CVE-2023-41915?
The affected software is libpmix-bin, libpmix2, python3-pmix, libpmi1-pmix, libpmi2-pmix, and libpmix2.
How do I fix CVE-2023-41915?
To fix CVE-2023-41915, update the affected software to version 4.1.2-2ubuntu1+esm1 for libpmix-bin, libpmix2, and python3-pmix, and version 3.1.5-1ubuntu0.1~esm1 for libpmi1-pmix and libpmi2-pmix.
Where can I find more information about USN-6434-1?
You can find more information about USN-6434-1 at the following references: [USN-6434-1](https://ubuntu.com/security/notices/USN-6434-1) and [CVE-2023-41915](https://ubuntu.com/security/CVE-2023-41915).