Lucene search
UbuntuUSN-6141-1HistoryJun 06, 2023 - 12:00 a.m.
xfce4-settings vulnerability
2023-06-0600:00:00
ubuntu.com
20
ubuntu
xfce4-settings
vulnerability
remote attacker
arbitrary arguments
xdg-open
Releases
- Ubuntu 22.10
- Ubuntu 22.04 LTS
Packages
- xfce4-settings - graphical application for managing Xfce settings
Details
Robin Peraglie and Johannes Moritz discovered that xfce4-settings
incorrectly parsed quoted input when processed through xdg-open.
A remote attacker could possibly use this issue to inject
arbitrary arguments into the default browser or file manager.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.10 | noarch | xfce4-settings | < 4.16.2-1ubuntu2.22.10.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | xfce4-helpers | < 4.16.2-1ubuntu2.22.10.1 | UNKNOWN |
| Ubuntu | 22.10 | noarch | xfce4-settings-dbgsym | < 4.16.2-1ubuntu2.22.10.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | xfce4-settings | < 4.16.2-1ubuntu2.22.04.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | xfce4-helpers | < 4.16.2-1ubuntu2.22.04.1 | UNKNOWN |
| Ubuntu | 22.04 | noarch | xfce4-settings-dbgsym | < 4.16.2-1ubuntu2.22.04.1 | UNKNOWN |
References
Related
osv
osv
xfce4-settings - security update
2022-12-06 00:00:00
xfce4-settings vulnerability
2023-06-06 08:02:54
CVE-2022-45062
2022-11-09 07:15:10
ubuntucve
ubuntucve
CVE-2022-45062
2022-11-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package libexo version 0.12.11-alt3
2022-11-18 00:00:00
nessus
nessus
GLSA-202305-05 : xfce4-settings: Browser Argument Injection
2023-05-03 00:00:00
Debian DSA-5296-1 : xfce4-settings - security update
2022-12-06 00:00:00
prion
prion
Design/Logic Flaw
2022-11-09 07:15:00
cvelist
cvelist
CVE-2022-45062
2022-11-09 00:00:00
slackware
slackware
[slackware-security] xfce4-settings
2022-11-09 21:21:55
debian
debian
[SECURITY] [DSA 5296-1] xfce4-settings security update
2022-12-06 18:17:02
debiancve
debiancve
CVE-2022-45062
2022-11-09 07:15:00
openvas
openvas
Fedora: Security Advisory for xfce4-places-plugin (FEDORA-2022-7febff96e0)
2022-12-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0471)
2022-12-19 00:00:00
Debian: Security Advisory (DSA-5296-1)
2022-12-07 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: xfce4-settings-4.16.5-1.fc37
2022-12-10 01:24:39
[SECURITY] Fedora 37 Update: xfce4-screenshooter-1.10.0-1.fc37
2022-12-10 01:24:39
[SECURITY] Fedora 37 Update: xfce4-places-plugin-1.8.3-1.fc37
2022-12-10 01:24:38
cve
cve
CVE-2022-45062
2022-11-09 07:15:00
veracode
veracode
Command Injection
2022-11-16 08:40:44
alpinelinux
alpinelinux
CVE-2022-45062
2022-11-09 07:15:00
mageia
mageia
Updated xfce4-settings packages fix security vulnerability
2022-12-17 21:48:08
gentoo
gentoo
xfce4-settings: Browser Argument Injection
2023-05-03 00:00:00