CVE-2023-5557
- Source
- https://cve.org/CVERecord?id=CVE-2023-5557
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-5557.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-5557
- Downstream
- Related
- Published
- 2023-10-13T02:15:11.077Z
- Modified
- 2026-02-16T02:08:17.075526Z
- Severity
-
- 7.7 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.
- References
-
- https://access.redhat.com/errata/RHSA-2023:7712
- https://access.redhat.com/errata/RHSA-2023:7713
- https://access.redhat.com/errata/RHSA-2023:7730
- https://access.redhat.com/errata/RHSA-2023:7731
- https://access.redhat.com/errata/RHSA-2023:7732
- https://access.redhat.com/errata/RHSA-2023:7733
- https://access.redhat.com/errata/RHSA-2023:7739
- https://access.redhat.com/errata/RHSA-2023:7744
- https://access.redhat.com/security/cve/CVE-2023-5557
- https://bugzilla.redhat.com/show_bug.cgi?id=2243096
- https://bugzilla.redhat.com/show_bug.cgi?id=2243096
- https://bugzilla.redhat.com/show_bug.cgi?id=2243096