PT-2022-27396

CVE-2022-45062

Published

2022-11-08

Updated

2023-06-06

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions xfce4-settings versions 4.16.3 and earlier, 4.17.x before 4.17.1

Description There is an argument injection issue in the xfce4-mime-helper from the xfce4-settings package. This issue allows for argument injection, which can potentially be exploited.

Recommendations For versions 4.16.3 and earlier, update to version 4.16.4 or later. For versions 4.17.x before 4.17.1, update to version 4.17.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Johannes Moritz

Robin Peraglie

Vendors

Affected products