7.8
CVSSv3

CVE-2023-46277

Published: 20/10/2023 Updated: 26/10/2023
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 0

Vulnerability Summary

please (aka pleaser) up to and including 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.)

Vulnerable Product Search on Vulmon Subscribe to Product

edneville please

Vendor Advisories

Debian Bug report logs - #1054289 rust-pleaser: CVE-2023-46277: RUSTSEC-2023-0066 Package: src:rust-pleaser; Maintainer for src:rust-pleaser is Debian Rust Maintainers <pkg-rust-maintainers@alioth-listsdebiannet>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 20 Oct 2023 19:12:02 UTC Severity: im ...