CVE-2023-5557 – Tracker-miners: sandbox escape

https://notcve.org/view.php?id=CVE-2023-5557

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability. Se encontró una falla en el paquete tracker-miners. Una debilidad en la sandbox permite que un archivo creado con fines malintencionados ejecute código fuera de la sandbox si el proceso de extracción del rastreador se ha visto comprometido primero por una vulnerabilidad separada. • https://access.redhat.com/errata/RHSA-2023:7712 https://access.redhat.com/errata/RHSA-2023:7713 https://access.redhat.com/errata/RHSA-2023:7730 https://access.redhat.com/errata/RHSA-2023:7731 https://access.redhat.com/errata/RHSA-2023:7732 https://access.redhat.com/errata/RHSA-2023:7733 https://access.redhat.com/errata/RHSA-2023:7739 https://access.redhat.com/errata/RHSA-2023:7744 https://access.redhat.com/security/cve/CVE-2023-5557 https://bugzilla.redhat.com/show • CWE-693: Protection Mechanism Failure •