Skip to content
OpenAdvisories
Medium · 5.1 CVE-2022-21945 EUVD-2022-27101GHSA-xxwq-xf8c-v665

cscreen: usage of fixed path /tmp/cscreen.debug

Published Mar 16, 2022 · Updated Sep 17, 2024 · Assigned by suse

Description

A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

Affected products

VendorProductAffectedFixed
openSUSE Factory cscreen – ≤ 1.2-1.3 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
openSUSE Tumbleweed cscreen 1.4-1.1 openSUSE-SU-2024:11924-1

Advisories 1

References