Skip to content
OpenAdvisories
Unscored USN-6008-1 1 CVE

exo vulnerability

Published Apr 11, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exo did not properly sanitized desktop files.
A remote attacker could possibly use this issue to to cause a crash or
arbitrary code execution.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS exo 0.10.2-3ubuntu1.14.04.2+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS exo 0.10.7-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS exo 0.12.2-0ubuntu0.18.04.1+esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS exo 0.12.11-1ubuntu1.20.04.1+esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS exo 4.16.3-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2022-32278

    XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-contro…

    exo exo Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-32278