Summary
It was discovered that Budgie Extras incorrectly handled certain temporary file paths.
An attacker could possibly use this issue to inject false information or deny
access to the application. (CVE-2023-49342, CVE-2023-49343, CVE-2023-49347)
Matthias Gerstner discovered that Budgie Extras incorrectly handled certain
temporary file paths. A local attacker could use this to inject arbitrary PNG
data in this path and have it displayed on the victim's desktop or deny access
to the application. (CVE-2023-49344)
Matthias Gerstner discovered that Budgie Extras incorrectly handled certain
temporary file paths. A local attacker could use this to inject false information
or deny access to the application. (CVE-2023-49345, CVE-2023-49346)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | budgie-extras | 1.4.0-1ubuntu3.1 |
Vulnerabilities 6
-
Medium 6.0
Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or …
-
Medium 6.0
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or mani…
-
Medium 6.0
Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewe…
-
Medium 6.0
Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or …
-
Medium 6.0
Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or…
-
Medium 6.0
Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or m…