Skip to main content

Vendor archive

seatd_project CVEs

Beta · best-effort

2 CVEs tagged to vendor seatd_project1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2022-25643

Published Feb 24, 2022

seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort

CVE-2021-41387

Published Sep 17, 2021

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1