Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Linuxmint Subscribe
Filtered by product Cinnamon
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-13054 2 Debian, Linuxmint 2 Debian Linux, Cinnamon 2018-09-04 5.8 MEDIUM 8.1 HIGH
An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of (for example) other users' icon files in _on_face_browse_menuitem_activated and _on_face_menuitem_activated. These icon files are written to the respective user's $HOME/.face location. If an unprivileged user prepares a symlink pointing to an arbitrary location, then this location will be overwritten with the icon content.