CVE-2022-27816

2022-03-3002:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.

CPENameOperatorVersion
swhkdeq1.0.0
swhkdeq1.1.2
swhkdeq1.1.7
swhkdeq1.1.5
swhkdeq1.1.4

Name	Operator	Version
swhkd	eq	1.0.0
swhkd	eq	1.1.2
swhkd	eq	1.1.7
swhkd	eq	1.1.5
swhkd	eq	1.1.4

References

www.openwall.com/lists/oss-security/2022/04/14/1

github.com/waycrate/swhkd/commit/0b620a09605afb815c6d8d8953bbb7a10a8c0575

github.com/waycrate/swhkd/releases