CVE-2023-29147 - In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier

Back Back to CVE browser

MEDIUM

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier

Published Jun 30, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.28%

Description

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-290

Authentication Bypass by Spoofing

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32749
Advisory
https://malwarebytes.com
Product
https://www.malwarebytes.com/secure/cves/cve-2023-29147
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32749		Advisory
https://malwarebytes.com		Product
https://www.malwarebytes.com/secure/cves/cve-2023-29147		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 30, 2023

Updated Nov 26, 2024

Reserved Mar 31, 2023

Link CVE-2023-29147

CISA Vulnrichment

Updated Nov 26, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-29147

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 30, 2023

Updated Nov 26, 2024

Link EUVD-2023-32749

GitHub

No data