CVE-2024-32019

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

UBUNTU-CVE-2024-32019

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019

Netdata is an open source observability tool. In affected versions the "ndsudo" tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The "ndsudo" tool is packaged as a "root"-owned executable with the SUID bit set. It only ru...

CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019 ndsudo: local privilege escalation via untrusted search path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

CVE-2024-32019

Netdata CVE-2024-32019 is a local privilege escalation in the ndsudo binary (setuid root) due to an untrusted PATH resolution. Vulnerable in Netdata Agent versions prior to 1.45.3 (e.g., 1.45.0 and earlier); patched in 1.45.3 and 1.45.0-169. Exploitation relies on hijacking allowed commands via P...

CVE-2024-32019

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...

PT-2024-24358

Name of the Vulnerable Software and Affected Versions Netdata versions prior to 1.45.3 Netdata versions prior to 1.45.2-169 Description Netdata is an open source observability tool. The ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs wi...

CVE-2024-32019: Untrusted Search Path

Netdata is an open source observability tool. In affected versions the ndsudo tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The ndsudo tool is packaged as a root-owned executable with the SUID bit set. It only runs a...