CVE-2022-27818

描述

SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.

受影響套件(1)

• crates.io/Simple-Wayland-HotKey-Daemonfrom 0, < 1.2.0

CVSS 分數

參考連結(5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2022-27818
• PATCHhttps://github.com/waycrate/swhkd
• WEBhttps://github.com/waycrate/swhkd/commit/f70b99dd575fab79d8a942111a6980431f006818
• WEBhttps://github.com/waycrate/swhkd/releases/tag/1.2.0
• WEBhttp://www.openwall.com/lists/oss-security/2022/04/14/1