VULNERABILITY INTELLIGENCE

CVE-2023-32190

CVSS score8.5 HIGH

EPSS probability0.20%

CISA KEVNot currently listed

Published2024-10-16

Last modified2026-06-17

Description

mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.