The Malwarebytes EDR 1.0.11 for Linux driver doesnt properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LD_LIBRARY_PATH, set LD_PRELOAD, or run an executable file in a debugger.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Endpoint_detection_and_response | Malwarebytes | * | 1.0.11 (including) |
| Malwarebytes | Malwarebytes | * | 1.0.14 (including) |