CVE-2020-26947

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the

published October 10, 2020

CVSS
—
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH (with a preference ahead of /usr/lib), which allows local users to gain privileges via a Trojan horse library in the current working directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00334 · 25.6th percentile
Published
2020-10-10T20:05Z
EPSS history
Timeline
  • 10 OCT 20:05Z
    monero-wallet-gui in Monero GUI before 0.17.1.0 includes the
    cvelistv5