PT-2017-7222 · Kde+1 · Kdelibs3+2

Yaakov Selkowitz · Published 2017-07-25 · Updated 2018-10-26 · CVE-2015-7543

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions aRts versions 1.5.10 and earlier kdelibs3 versions 3.5.10 and earlier

Description The issue arises from improper creation of temporary directories, allowing local users to hijack the IPC by pre-creating the temporary directory.

Recommendations For aRts versions 1.5.10 and earlier, consider implementing secure temporary directory creation to prevent IPC hijacking. For kdelibs3 versions 3.5.10 and earlier, ensure proper temporary directory creation to mitigate the risk of IPC hijacking.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2015-7543

DLA-366-1

DLA-367-1

SUSE-SU-2018:3487-1

SUSE-SU-2018_3487-1

Affected Products

Suse

Arts

Kdelibs3

References · 9

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1280543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7543 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:3487-1 · Vendor Advisory
• https://bugzilla.suse.com/958347 · Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• https://suse.com/support/update/announcement/2018/suse-su-20183487-1 · Note
• https://suse.com/security/cve/CVE-2015-7543 · Note
• https://suse.com/security/cve/CVE-2015-7543.html · Note
• https://lists.suse.com/pipermail/sle-security-updates/2018-October/004799.html · Note