Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2006-2916

arts: does not check the return value of the setuid which prevents artsd from dropping privileges

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Kde Linux
Products
Arts Linux Kernel
CVE-2015-7543

arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.

CVSS 3.0 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Artsproject Kde
Products
Arts Kdelibs