vulnerability

VMware Photon OS: CVE-2023-42465

Severity
6
CVSS
(AV:L/AC:H/Au:S/C:C/I:C/A:C)
Published
2023-12-22
Added
2025-01-20
Modified
2025-02-04

Description

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Solution

vmware-photon_os_update_tdnf
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.