CVE-2023-46277
- Source
- https://cve.org/CVERecord?id=CVE-2023-46277
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46277.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-46277
- Aliases
- Downstream
- Published
- 2023-10-20T00:00:00Z
- Modified
- 2026-05-28T03:53:30.568435358Z
- Summary
- [none]
- Details
-
please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOCSTI and TIOCLINUX are disabled, this cannot be exploited.)
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46277.json", "cna_assigner": "mitre" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46277.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-46277
- https://rustsec.org/advisories/RUSTSEC-2023-0066.html
- https://gitlab.com/edneville/please/-/issues/13
- https://github.com/rustsec/advisory-db/pull/1798
- https://gitlab.com/edneville/please/-/merge_requests/69#note_1594254575
Affected packages
Git / gitlab.com/edneville/please
Affected ranges
- Type
- GIT
- Repo
- https://gitlab.com/edneville/please
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed