CVE-2021-23556

Name of the Vulnerable Software and Affected Versions guake versions prior to 3.8.5

Description The issue is related to the exposure of execute command and execute command by uuid methods via the d-bus interface, allowing a malicious user to run an arbitrary command. Exploitation requires the user to have installed another malicious program that can send dbus signals or run terminal commands.

Recommendations For versions prior to 3.8.5, update to version 3.8.5 or later to resolve the issue. As a temporary workaround, consider disabling the execute command and execute command by uuid methods via the d-bus interface until a patch is available.