CVE-2023-5557

Description

A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.

References

https://bugzilla.redhat.com/show_bug.cgi?id=2243096

https://access.redhat.com/security/cve/CVE-2023-5557

https://access.redhat.com/errata/RHSA-2023:7744

https://access.redhat.com/errata/RHSA-2023:7739

https://access.redhat.com/errata/RHSA-2023:7733

https://access.redhat.com/errata/RHSA-2023:7732

https://access.redhat.com/errata/RHSA-2023:7731

https://access.redhat.com/errata/RHSA-2023:7730

https://access.redhat.com/errata/RHSA-2023:7713

https://access.redhat.com/errata/RHSA-2023:7712

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3