Debian DLA-3501-1: Urgent Renderdoc Security Update Addresses Code Risks
debian lts
July 25, 2023
Multiple security issues were discovered in renderdoc a stand-alone graphics debugging tool, which potentially allows a remote attacker to execute arbitrary code
Summary
CVE-2023-33863
an integer overflow that results in a heap-based buffer overflow
that might be exploitable by a remote attacker to execute arbitrary
code on the machine that runs RenderDoc
CVE-2023-33864
an integer underflow that results in a heap-based buffer overflow
that might be exploitable by a remote attacker to execute arbitrary
code on the machine that runs RenderDoc.
CVE-2023-33865
a symlink vulnerability that might be exploitable by a unprivileged
local attacker to obtain the privileges of the user who runs
RenderDoc.
For Debian 10 buster, these problems have been fixed in version
1.2+dfsg-2+deb10u1.
We recommend that you upgrade your renderdoc packages.
For the detailed security status of renderdoc please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/renderdoc
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Package: renderdoc
Version: 1.2+dfsg-2+deb10u1
CVE ID: CVE-2023-33863 CVE-2023-33864 CVE-2023-33865
Debian Bug: 1037208
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!