Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-5557

Tracker-miners: sandbox escape

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.1.5-2.el8_9.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support

Default version status: affected

  • 0:2.1.5-2.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service

Default version status: affected

  • 0:2.1.5-2.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions

Default version status: affected

  • 0:2.1.5-2.el8_2.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Default version status: affected

  • 0:2.1.5-2.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Default version status: affected

  • 0:2.1.5-2.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Default version status: affected

  • 0:2.1.5-2.el8_4.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:2.1.5-2.el8_6.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:2.1.5-2.el8_8.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.1.2-4.el9_3 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support

Default version status: affected

  • 0:3.1.2-2.el9_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support

Default version status: affected

  • 0:3.1.2-4.el9_2 to < *unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

References