Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2022-1224

Высокий

ALT-PU-2022-1224: package guake update to version 3.8.5-alt1

Источник
errata.altlinux.org
Дата публикации
07.02.2022
Дата обновления
04.02.2026
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades guake to version 3.8.5-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 8
ubuntu
больше 4 лет назад

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. **Note:** Exploitation requires the user to have installed another malicious program that will be able to send dbus signals or run terminal commands.

CVSS3: 8
nvd
больше 4 лет назад

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of execute_command and execute_command_by_uuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. **Note:** Exploitation requires the user to have installed another malicious program that will be able to send dbus signals or run terminal commands.

CVSS3: 8
debian
больше 4 лет назад

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Met ...

CVSS3: 6.4
github
больше 4 лет назад

Command injection in guake