SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.
References
Link | Resource |
---|---|
https://github.com/waycrate/swhkd/releases | Release Notes Third Party Advisory |
https://github.com/waycrate/swhkd/commit/0b620a09605afb815c6d8d8953bbb7a10a8c0575 | Patch Third Party Advisory |
http://www.openwall.com/lists/oss-security/2022/04/14/1 | Exploit Mailing List Patch Third Party Advisory |
Configurations
Information
Published : 2022-03-29 19:15
Updated : 2022-10-27 07:28
NVD link : CVE-2022-27816
Mitre link : CVE-2022-27816
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
waycrate
- swhkd