Описание
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| pcmanfm | fixed | 1.2.5-3 | package | |
| pcmanfm | no-dsa | jessie | package | |
| pcmanfm | no-dsa | wheezy | package |
Примечания
Fixed by: https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git;a=commitdiff;h=bc8c3d871e9ecc67c47ff002b68cf049793faf08
EPSS
Процентиль: 27%
0.00334
Низкий
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 9 лет назад
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
CVSS3: 5.5
nvd
больше 9 лет назад
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
CVSS3: 5.5
github
больше 4 лет назад
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
CVSS3: 5.5
altlinux
больше 8 лет назад
ALT-PU-2018-1619: package `pcmanfm` update to version 1.3.0-alt1
EPSS
Процентиль: 27%
0.00334
Низкий