Freedesktop.Org vulnerabilities
4 vulnerabilities
Known vulnerabilities in Freedesktop.Org products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3CVE-2017-12194debianspice-gtk+9
EPSS score5.25%
A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are believed to be vulnerable.CVE-2019-3844chainguardpy3-systemd+13EPSS score0.92%
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned by the service transient group with the setgid bit set. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the GID will be recycled.CVE-2019-3843chainguardpy3-systemd+14EPSS score0.94%
It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.CVE-2026-9539debianlibslirp+12EPSS score0.22%
An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gigabytes of sensitive host-process heap memory via sending crafted TCP segments with manipulated URG flags and urgent pointers (ti_urp).