CVE-2023-29145

The CVE-2023-29145 entry concerns Malwarebytes EDR 1.0.11 for Linux. The issue is a failure to properly whitelist executable libraries loaded by executables, enabling arbitrary code execution. An attacker could exploit by setting LD_LIBRARY_PATH, LD_PRELOAD, or running an executable under a debug...

CVE-2023-29147

In Malwarebytes EDR 1.0.11 for Linux, the vulnerability is an inode-id based detection bypass: an inode may be reused after file replacement, and two files on different filesystems can share the same identifier. This allows bypassing detection layers that rely on inode identifiers. Red Hat/PRION ...