Lucene search
HistoryJun 13, 2024 - 7:15 p.m.
CVE-2024-36587
dnscrypt-proxy
insecure permissions
non-privileged attackers
privilege escalation
overwriting binary
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy.
Related
ubuntucve
ubuntucve
CVE-2024-36587
2024-06-13 00:00:00
vulnrichment
vulnrichment
CVE-2024-36587
2024-06-13 00:00:00
osv
osv
CVE-2024-36587
2024-06-13 19:15:00
cve
cve
CVE-2024-36587
2024-06-13 19:15:51
veracode
veracode
Privilege Escalation
2024-06-17 04:30:00
debiancve
debiancve
CVE-2024-36587
2024-06-13 19:15:51
cvelist
cvelist
CVE-2024-36587
2024-06-13 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-36587