CVE-2023-29081

MEDIUM

Suite Setups <InstallShield 2023 R2 - DoS

Title source: llm

Description

A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders.

References (1)

Core 1

Core References

Third Party Advisory

https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 4.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-276

Status published

Products (8)

flexera/installshield 2016 (3 CPE variants)

flexera/installshield 2017 (2 CPE variants)

flexera/installshield 2018 (3 CPE variants)

flexera/installshield 2019 (3 CPE variants)

flexera/installshield 2020 (4 CPE variants)

flexera/installshield 2021 r1 (2 CPE variants)

flexera/installshield 2022 r1 (2 CPE variants)

flexera/installshield 2023 r1

Published Jan 26, 2024

Tracked Since Feb 18, 2026