CVE-2023-47480

An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function.

Score

CVSS 3.1 8.4 High

Status

Deferred - cve@mitre.org

Published

2024-09-20

Last modified

2024-09-25

Weaknesses

CWE-252

Affected products

• Puredata (Puredata)

References

• https://github.com/pure-data/pure-data/commit/0b5e467b8728b3ed56e1a8ee5b367ce78e7e6e5d
• https://github.com/pure-data/pure-data/issues/2063
• https://puredata.info/
• https://lists.debian.org/debian-lts-announce/2024/09/msg00038.html