GNOME users at risk of RCE attack (CVE-2023-43641)

If you’re running GNOME on you Linux system(s), you are probably open to remote code execution attacks via a booby-trapped file, thanks to a memory corruption vulnerability (CVE-2023-43641) in the libcue library. About CVE-2023-43641 Discovered by GitHub security researcher Kevin Backhouse, CVE-2023-43641 affects the libcue library, which is used for parsing cue sheets (files) that contain the layout of tracks on a CD. Libcue is also used by an application called tracker-miners, which indexes files … More →

The post …

attack attacks code code execution corruption cve debian don't miss fedora file github gnome hot stuff kevin library linux memory memory corruption open source parsing rce red hat remote code remote code execution researcher risk running security security researcher suse system ubuntu vulnerability vulnerability disclosure