libXpm -- Issues handling XPM files

The X.Org project reports: CVE-2022-46285: Infinite loop on unclosed comments When reading XPM images from a file with libXpm 3.5.14 or older, if a comment in the file is not closed i.e. a C-style comment starts with "/" and is missing the closing "/", the ParseComment function will loop forever...

Privilege Escalation

seatd is vulnerable to privilege escalation. The vulnerability exists due to the system using execlp whichallows setuid root to be installed...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

CVE-2021-41387

The CVE affects seatd-launch in seatd 0.6.x before 0.6.2, where privilege escalation is possible because seatd-launch uses execlp and may be installed setuid root. The root cause is execlp honoring PATH, enabling a caller to influence which executable is loaded. Impact is privilege escalation to ...

PT-2021-23286

Name of the Vulnerable Software and Affected Versions seatd versions 0.6.x before 0.6.2 seatd version 0.6.0 through 0.6.1 Description The issue allows privilege escalation because it uses execlp and may be installed setuid root. Recommendations For seatd versions 0.6.x before 0.6.2, update to...

Seatd code issues and vulnerabilities

Seatd is an administrative daemon. It is used to mediate access to shared devices graphics, input. A security vulnerability exists in seatd that stems from seatd-launch in the software using execlp and possibly installing setuid root, which can be exploited by an attacker to achieve elevation of...

CVE-2021-41387: Untrusted Search Path

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

Calibre E-Book Reader - Local Privilege Escalation (1)

!/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi and look at the array of silly things done, only one ...