CVE-2024-36587

Summary

Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md

References

• https://github.com/go-compile/security-advisories/blob/master/vulns/CVE-2024-36587.md

• ←Previous
• Next→