CVE-2022-25643
Published Feb 24, 2022seatd-launch in seatd 0.6.x before 0.6.4 allows removing files with escalated privileges when installed setuid root. The attack vector is a user-supplied socket pathname.
Vendor/product archive
seatd_project / seatd CVEs
Beta · best-effort2 CVEs tagged to seatd_project / seatd — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2021-41387
Published Sep 17, 2021seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.
Showing 1-2 of 2 CVEsPage 1 of 1