PT-2017-18635
CVE-2017-8934
·
Published
2017-05-15
·
Updated
2026-10-31
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
PCManFM version 1.2.5
Description
The issue allows a local user to cause a denial of service, resulting in application unavailability, due to the insecure use of /tmp for a socket file.
Recommendations
For PCManFM version 1.2.5, consider updating to a newer version that securely handles temporary files to prevent denial of service attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾