GNOME Linux Systems Exposed to 1-Click RCE Attacks

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

A new security vulnerability, known as CVE-2023-43641, has been identified in the libcue library. This library is utilized by Tracker Miners and is shipped along with the GNOME desktop environment. This vulnerability presents a significant threat to Linux systems using the GNOME Desktop environment, as successful exploitation could result in arbitrary code execution.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.