Skip to content
OpenAdvisories
Unscored USN-8982-1 1 CVE

feh vulnerability

Published Nov 3, 2026 · Updated Nov 4, 2026

Summary

It was discovered that feh incorrectly handled certain IPC messages from a
client pretending to be the Enlightenment window manager, leading to an
integer overflow. An attacker could possibly use this issue to cause feh to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS feh 2.14-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —

    In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to tr…

References

  • report
    https://ubuntu.com/security/CVE-2017-7875