aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.
CVSS Details
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kdelibsUpgrade arts | Mar 31, 2017 | Dec 10, 2015 |
| Suse | — | Upgrade kdelibs3-x86Upgrade kdelibs3-artsUpgrade kdelibs3-docUpgrade kdelibs3-32bitUpgrade kdelibs3-arts-x86Upgrade kdelibs3-default-style-32bitUpgrade kdelibs3-arts-32bitUpgrade kdelibs3-default-style-x86Upgrade kdelibs3Upgrade kdelibs3-default-styleUpgrade kdelibs3-devel | Oct 28, 2018 | Dec 10, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub