Description
Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability).
Metrics
CVSS 3.0 3.3/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- https://bugs.debian.org/862570Third Party Advisory
- https://git.lxde.org/gitweb/?p=lxde/menu-cache.git%3Ba=commit%3Bh=56f66684592abf257c4004e6e1fff041c64a12ce
- https://bugs.debian.org/862570Third Party Advisory
- https://git.lxde.org/gitweb/?p=lxde/menu-cache.git%3Ba=commit%3Bh=56f66684592abf257c4004e6e1fff041c64a12ce
Timeline
- Published
- May 15, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified