CVE-2024-32019-ndsudo

La vulnérabilité ndsudo permet à un attaquant d'obtenir des privilèges root en exploitant un chemin de recherche non fiable dans l'outil ndsudo, qui fait partie de l'Agent Netdata. Cela peut permettre l'exécution de programmes arbitraires avec des privilèges élevés si l'attaquant place un binaire...

CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation

🚨 CVE-2024-32019 - Эксплойт уязвимости ndsudo Netdata в PATH LPE до Root Эксплойт на Python для CVE-2024-32019 , критической уязвимости локального повышения привилегий в Netdata Agent , использующей некорректно настроенный SUID-бинарник ndsudo, который небезопасно обрабатывает переменную окружени...

CVE-2023-22496-PoC

CVE-2023-22496 — Preuve de concept d'injection de commandes OS dans Netdata Agent Sévérité : Critique CVSS 9.8 Affecté : Netdata Agent Corrigé dans : v1.37.0 Type : Injection de commandes OS CWE-78 Aperçu CVE-2023-22496 est une vulnérabilité d'injection de commandes OS dans le système de...

Exploit for CVE-2024-32019

The ndsudo vulnerability allows an attacker to gain root permiss...

Linux Distros Unpatched Vulnerability : CVE-2023-22496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection c...

CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

OESA-2024-1052 netdata security update

netdata is the fastest way to visualize metrics. It is a resource efficient, highly optimized system for collecting and visualizing any type of realtime time-series data, from CPU usage, disk activity, SQL queries, API calls, web site visitors, etc. netdata tries to visualize the truth of now, in...

CVE-2023-22497

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

CVE-2023-22496 Netdata vulnerable to command injection

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the function healthalarmexecute is called. This...