PT-2022-27396 · Xfce+3 · Xfce4-Mime-Helper+4

Johannes Moritz + 1 · Published 2022-11-08 · Updated 2023-06-06 · CVE-2022-45062

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xfce4-settings versions 4.16.3 and earlier, 4.17.x before 4.17.1

Description There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be exploited.

Recommendations For versions 4.16.3 and earlier, update to version 4.16.4 or later. For versions 4.17.x before 4.17.1, update to version 4.17.1 or later.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

ALT-PU-2022-3023

ALT-PU-2022-3101

ALT-PU-2022-3168

CVE-2022-45062

DSA-5296-1

MGASA-2022-0471

OESA-2022-2105

USN-6141-1

Affected Products

Alt Linux

Linuxmint

Ubuntu

Xfce4-Mime-Helper

Xfce4-Settings

References · 26

• 🔥 https://gitlab.xfce.org/xfce/xfce4-settings/-/issues/390 · Exploit
• https://ubuntu.com/security/notices/USN-6141-1 · Vendor Advisory
• https://gitlab.xfce.org/xfce/xfce4-settings/-/tags · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0471.html · Security Note
• https://debian.org/security/2022/dsa-5296 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-45062 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-45062 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-45062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45062 · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0471 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-45062 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/H2VXO6JTWDSNXI34DHFAZIN7PGCR4BLI · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-45062 · Vendor Advisory
• https://security.gentoo.org/glsa/202305-05 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6141-1 · Vendor Advisory