CVE-2023-29081: InstallShield Symlink Vulnerability Affecting Suite Project Setups

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-26 · updated 2026-06-17
Weakness: CWE-276

Description

A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on local, temporary folders.

Affected products

Revenera InstallShield: 2016, 2016-sp1, 2016-sp2, 2017, 2017-sp1, 2018 (+14)

References

https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052
https://community.flexera.com/t5/InstallShield-Knowledge-Base/CVE-2023-29081-InstallShield-Symlink-Vulnerability-Affecting/ta-p/305052

Get alerted when CVE-2023-29081 or the next vulnerability affects your stack