Lucene search
GoogleOSV:USN-6115-1HistoryMay 30, 2023 - 9:11 a.m.
texlive-bin vulnerability
2023-05-3009:11:23
Google
osv.dev
7
luatex tex live
shell escape
vulnerability
attacker
arbitrary shell commands
software
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
40.5%
Max Chernoff discovered that LuaTeX (TeX Live) did not properly disable
shell escape. An attacker could possibly use this issue to execute
arbitrary shell commands.
Related
prion
prion
Design/Logic Flaw
2023-05-20 18:15:00
nessus
nessus
CentOS 8 : texlive (CESA-2023:3661)
2024-02-08 00:00:00
CentOS 9 : texlive-20200406-26.el9
2024-02-29 00:00:00
Oracle Linux 8 / 9 : texlive (ELSA-2023-3661)
2023-06-22 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2023-144-01)
2023-05-25 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:2285-1)
2023-05-25 00:00:00
Ubuntu: Security Advisory (USN-6115-1)
2023-05-31 00:00:00
redhatcve
redhatcve
CVE-2023-32700
2023-05-22 07:40:21
veracode
veracode
Arbitrary Code Execution
2023-06-04 23:56:52
debian
debian
[SECURITY] [DLA 3427-1] texlive-bin security update
2023-05-20 16:05:26
[SECURITY] [DSA 5406-1] texlive-bin security update
2023-05-20 08:14:54
[SECURITY] [DLA 3427-2] texlive-bin regression update
2023-05-31 20:20:30
fedora
fedora
[SECURITY] Fedora 38 Update: texlive-base-20220321-72.fc38
2023-05-31 01:35:33
[SECURITY] Fedora 37 Update: texlive-base-20210325-54.fc37
2023-06-04 01:23:54
oraclelinux
oraclelinux
texlive security update
2023-06-21 00:00:00
rocky
rocky
texlive security update
2023-06-24 18:52:51
mageia
mageia
Updated texlive packages fix security vulnerability
2023-07-19 22:53:31
osv
osv
texlive-bin - security update
2023-05-20 00:00:00
Important: texlive security update
2023-06-24 18:52:51
Important: texlive security update
2023-06-19 00:00:00
debiancve
debiancve
CVE-2023-32700
2023-05-20 18:15:09
ubuntucve
ubuntucve
CVE-2023-32700
2023-05-20 00:00:00
ubuntu
ubuntu
TeX Live vulnerability
2023-05-30 00:00:00
cve
cve
CVE-2023-32700
2023-05-20 18:15:09
alpinelinux
alpinelinux
CVE-2023-32700
2023-05-20 18:15:09
almalinux
almalinux
Important: texlive security update
2023-06-19 00:00:00
cvelist
cvelist
CVE-2023-32700
2023-05-20 00:00:00
nvd
nvd
CVE-2023-32700
2023-05-20 18:15:09
slackware
slackware
[slackware-security] texlive
2023-05-25 00:24:57
redhat
redhat
(RHSA-2023:3661) Important: texlive security update
2023-06-19 08:10:56
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
Low
EPSS
0.001
Percentile
40.5%
Related for OSV:USN-6115-1