CVE-2023-46277

Name of the Vulnerable Software and Affected Versions please versions 0.5.4 and earlier

Description The issue allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. This can be exploited when these ioctls are not disabled. The vulnerability affects both cases where root wants to drop privileges and when non-root wants to gain other privileges.

Recommendations For please versions 0.5.4 and earlier, consider disabling the TIOCSTI and TIOCLINUX ioctls as a temporary workaround to prevent exploitation. Additionally, restrict the use of the please software until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.