CVE-2023-29147

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, because an identifier may be reused when a file is replaced, and because two files on different filesystems can have the same identifier.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-290

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://malwarebytes.comProduct
https://www.malwarebytes.com/secure/cves/cve-2023-29147Vendor Advisory
https://malwarebytes.comProduct
https://www.malwarebytes.com/secure/cves/cve-2023-29147Vendor Advisory

Timeline

Published: Jun 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-29159.1The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, CVE-2023-291508.8mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman CVE-2023-291517.8Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable esca CVE-2023-291528.1By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account.CVE-2023-291534.9Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potenti CVE-2023-291547.2SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product wit CVE-2023-291559.8Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This CVE-2023-291566.8DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An CVE-2023-291577.8Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatio CVE-2023-291589.1SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or CVE-2023-291597.5Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to vie CVE-2023-29165.3The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the