CVE-2023-33865 — Vulnetix

CVE-2023-33865 PUBLISHED CVSS 8.5 HIGH

RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory regardless of ownership.

EPSS 0.04% · 13.4th percentile

Risk Scores

CVSS 4.0

8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.04%

13.4th percentile

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a, n/a
renderdoc	renderdoc	0, 0, 0

Exploit Intelligence

CIRCL seen: CVE-2023-33865 (circl-sighting)
CIRCL published-proof-of-concept: CVE-2023-33865 (circl-sighting)
http://seclists.org/fulldisclosure/2023/Jun/2 (nist-nvd)
https://www.qualys.com/2023/06/06/renderdoc/renderdoc.txt (nist-nvd)
http://packetstormsecurity.com/files/172804/RenderDoc-1.26-Local-Privilege-Escalation-Remote-Code-Execution.html (nist-nvd)
https://lists.debian.org/debian-lts-announce/2024/12/msg00008.html (circl)
https://renderdoc.org/ (circl)
GLSA-202311-10 (circl)
[debian-lts-announce] 20230725 [SECURITY] [DLA 3501-1] renderdoc security update (circl)
RenderDoc 1.26 Local Privilege Escalation / Remote Code Execution Vulnerabilities (0day-today)

…and 3 more exploits

Timeline

Jun 7, 2023 CVE Published
Jun 8, 2023 PoC Published
Jun 8, 2023 EPSS Score
Jun 8, 2023 PoC Published
Jul 14, 2023 EPSS Score
Aug 19, 2023 EPSS Score
Sep 23, 2023 EPSS Score
Oct 29, 2023 EPSS Score
Dec 4, 2023 EPSS Score
Jan 9, 2024 EPSS Score
Feb 13, 2024 EPSS Score
Mar 20, 2024 EPSS Score

References

Open in Interactive Console →

$ Console Community · 100/wk Open console ›