Skip to content
OpenAdvisories

Package · Debian

fluxbox

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.5
    CVE-2026-123785

    Fluxbox through 1.3.7 Infinite Loop via Menu::updateMenu() Style Geometry

    Fluxbox through 1.3.7 contains an infinite loop vulnerability in Menu::updateMenu() in src/FbTk/Menu.cc that allows attackers to hang the window manager via crafted style geometry values. Attackers can supply a style with an oversized unbounded menu.titleHeig…

    fluxbox fluxbox fluxbox fluxbox Debian Ubuntu
  • High 7.8
    CVE-2026-123784

    Fluxbox through 1.3.7 OS Command Injection via Style Background Values

    Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootTheme::reconfigTheme() that allows attackers to execute commands via crafted style background values. Attackers can embed shell metacharacters in background pixmap paths, random direc…

    fluxbox fluxbox fluxbox fluxbox Debian Ubuntu
  • Unscored —
    CVE-2004-1204

    FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman…

    fluxbox Debian