VDB
CVE-2017-8934
CVE-2017-8934
PUBLISHED
CVSS 5.5 MEDIUM
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
EPSS 0.33% · 26.7th percentile
Risk Scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.33%
26.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | pcmanfm | 0, 1.2.3-1.1, 1.2.4-1 |
| Ubuntu:14.04:LTS | pcmanfm | 0, 1.1.2-0ubuntu1, 1.1.2-1 |
Timeline
- May 15, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 24, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Oct 29, 2021 EPSS Score
- Dec 31, 2021 EPSS Score
- Mar 5, 2022 EPSS Score
- May 8, 2022 EPSS Score
- Jul 10, 2022 EPSS Score
- Sep 13, 2022 EPSS Score
- Nov 15, 2022 EPSS Score
- Jan 18, 2023 EPSS Score
References
- https://www.cve.org/CVERecord?id=CVE-2017-8934 third-party-advisory
- https://ubuntu.com/security/CVE-2017-8934 advisory
- https://bugs.debian.org/862571 advisory