CVE-2023-47480

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-47480
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47480.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-47480
Related
Published
2024-09-20T17:15:14Z
Modified
2024-10-08T03:54:40.749131Z
Summary
[none]
Details

An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function.

References

Affected packages

Debian:11 / puredata

Package

Name
puredata
Purl
pkg:deb/debian/puredata?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.51.4-1+deb11u1

Affected versions

0.*

0.51.4-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / puredata

Package

Name
puredata
Purl
pkg:deb/debian/puredata?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.53.1+ds-2
0.53.1+ds-2+deb12u1
0.53.1+ds-2+exp1
0.54.0+ds-1~exp1
0.54.0+ds-1
0.54.0+ds-2
0.54.0+ds-3~bpo12+1
0.54.0+ds-3
0.54.0+ds-4~bpo12+1
0.54.0+ds-4
0.54.1+ds-1~bpo12+1
0.54.1+ds-1
0.54.1+ds-2~bpo12+1
0.54.1+ds-2
0.54.1+ds-3
0.54.1+ds-4~bpo12+1
0.54.1+ds-4
0.54.1+ds-5~bpo12+1
0.54.1+ds-5
0.55.0+ds-1~bpo12+1
0.55.0+ds-1
0.55.1+ds-1~bpo12+1
0.55.1+ds-1
0.55.1+ds-2~bpo12+1
0.55.1+ds-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / puredata

Package

Name
puredata
Purl
pkg:deb/debian/puredata?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.54.1+ds-1

Affected versions

0.*

0.53.1+ds-2
0.53.1+ds-2+exp1
0.54.0+ds-1~exp1
0.54.0+ds-1
0.54.0+ds-2
0.54.0+ds-3~bpo12+1
0.54.0+ds-3
0.54.0+ds-4~bpo12+1
0.54.0+ds-4
0.54.1+ds-1~bpo12+1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/pure-data/pure-data

Affected ranges

Type
GIT
Repo
https://github.com/pure-data/pure-data
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0b5e467b8728b3ed56e1a8ee5b367ce78e7e6e5d

Affected versions

0.*

0.32-1test5
0.41-0test06
0.41.0
0.41.2
0.41.3
0.41.4
0.42-4
0.42-5
0.42.0
0.42.1
0.42.2
0.42.3
0.42.4
0.42.5
0.43-1
0.43-1test3
0.43-1test4
0.43-1test5
0.43-2
0.43-2test1
0.43-3
0.43-3test1
0.43-test1
0.43.0
0.44-0
0.44-0test1
0.44-0test2
0.44-1
0.44-3
0.45-0test1
0.45-0test2
0.46-0
0.46-0test1
0.46-0test2
0.46-0test3
0.46-0test4
0.46-0test5
0.46-1
0.46-2
0.46-4
0.46-5
0.46-6
0.47-0
0.47-0test1
0.47-0test2
0.47-0test3
0.47-0test4
0.47-1
0.48-0
0.48-0test1
0.48-0test2
0.48-0test3
0.48-0test4
0.48-0test5
0.48-0test6
0.48-0test7
0.48-1
0.48-1test1
0.48-1test2
0.48-1test3
0.48-2
0.48-2test1
0.49-0
0.49-0test1
0.49-0test2
0.49-0test3
0.49-0test4
0.49-0test5
0.49-1
0.50-0
0.50-0test1
0.50-1
0.50-2
0.51-0
0.51-0test1
0.51-0test3
0.51-1
0.51-1test1
0.51-2
0.51-3
0.51-3test1
0.51-3test2
0.51-3test3
0.51-3test4
0.51-3test5
0.51-4
0.51-4test1
0.51-4test3
0.52-0
0.52-0test1
0.52-0test2
0.52-0test3
0.52-0test4
0.52-1
0.52-1-really
0.52-2
0.52-2test1
0.52-3test1
0.53-0
0.53-0test1
0.53-0test2
0.53-0test2a
0.53-0test3
0.53-1
0.53-1test1
0.54-0
0.54-0test1

Other

latest
tagtest
tmp

pd-0.*

pd-0.52-1-test-temp