CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

PT-2024-24358

Name of the Vulnerable Software and Affected Versions Netdata versions prior to 1.45.3 Netdata versions prior to 1.45.2-169 Description Netdata is an open source observability tool. The ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs wi...