GitHub Advisoryadvisory · crates.io

GHSA-8m49-2xj8-67v9 Data Loss/Denial of Service in SWHKD

HIGH Published 2022-03-31 Modified 2022-04-28 Official page ↗
Aliases
CVE-2022-27816
Ecosystem
crates.io
Packages
Simple-Wayland-HotKey-Daemon
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-59
Reviewed
2022-04-01

Affected packages

• crates.io Simple-Wayland-HotKey-Daemon: < 1.2.0 → fixed in 1.2.0

Description

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service. A patch is available on the `1.1.0` branch of the repository.

Related

Alias · CVE (1)

  • CVE-2022-27816 SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. vulnerability

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References