Vulnerabilities > CVE-2023-29145 - Unspecified vulnerability in Malwarebytes Endpoint Detection and Response and Malwarebytes
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |