A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:7712 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7730 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:7732 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:7732 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4868-1 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7732 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:7732 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7744 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7732 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7731 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7733 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7739 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-7712 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:7712 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7712 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:7713 advisory.

  - tracker-miners: sandbox escape (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6504-1 advisory.

  - A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted     file to execute code outside the sandbox if the tracker-extract process has first been compromised by a     separate vulnerability. (CVE-2023-5557)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196973	Rocky Linux 9 : tracker-miners (RLSA-2023:7712)	Nessus	Rocky Linux Local Security Checks	high
189656	RHEL 8 : tracker-miners (RHSA-2023:7730)	Nessus	Red Hat Local Security Checks	high
187733	CentOS 8 : tracker-miners (CESA-2023:7732)	Nessus	CentOS Local Security Checks	high
187716	Rocky Linux 8 : tracker-miners (RLSA-2023:7732)	Nessus	Rocky Linux Local Security Checks	high
187021	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : tracker-miners (SUSE-SU-2023:4868-1)	Nessus	SuSE Local Security Checks	high
186963	Oracle Linux 8 : tracker-miners (ELSA-2023-7732)	Nessus	Oracle Linux Local Security Checks	high
186942	AlmaLinux 8 : tracker-miners (ALSA-2023:7732)	Nessus	Alma Linux Local Security Checks	high
186802	RHEL 9 : tracker-miners (RHSA-2023:7744)	Nessus	Red Hat Local Security Checks	high
186764	RHEL 8 : tracker-miners (RHSA-2023:7732)	Nessus	Red Hat Local Security Checks	high
186762	RHEL 8 : tracker-miners (RHSA-2023:7731)	Nessus	Red Hat Local Security Checks	high
186761	RHEL 8 : tracker-miners (RHSA-2023:7733)	Nessus	Red Hat Local Security Checks	high
186759	RHEL 8 : tracker-miners (RHSA-2023:7739)	Nessus	Red Hat Local Security Checks	high
186753	Oracle Linux 9 : tracker-miners (ELSA-2023-7712)	Nessus	Oracle Linux Local Security Checks	high
186751	AlmaLinux 9 : tracker-miners (ALSA-2023:7712)	Nessus	Alma Linux Local Security Checks	high
186729	RHEL 9 : tracker-miners (RHSA-2023:7712)	Nessus	Red Hat Local Security Checks	high
186727	RHEL 9 : tracker-miners (RHSA-2023:7713)	Nessus	Red Hat Local Security Checks	high
186193	Ubuntu 22.04 LTS / 23.04 / 23.10 : tracker-miners vulnerability (USN-6504-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2023-5557

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high