CVE-2022-27818

Description

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.

Affected packages (1)

• crates.io/Simple-Wayland-HotKey-Daemonfrom 0, < 1.2.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-27818
• PATCHhttps://github.com/waycrate/swhkd
• WEBhttps://github.com/waycrate/swhkd/commit/f70b99dd575fab79d8a942111a6980431f006818
• WEBhttps://github.com/waycrate/swhkd/releases/tag/1.2.0
• WEBhttp://www.openwall.com/lists/oss-security/2022/04/14/1