7

CVE-2015-7543: artsproject arts Race Condition

CVSS: 7.0v3.0HighModified
AliasesSUSE-SU-2018:3487-1DLA-366-1DLA-367-1
Published 25-07-2017Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2015-7543 is a high (CVSS 7.0) Race Condition vulnerability in artsproject arts. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
38/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.0/10
010
High · v3.0 (NVD)
EPSS score
0.24%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Timeline

  1. 25-07-2017
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

15%

Versus all other CVEs

30-day change

0.00 pp

From 0.24% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (bugzilla.redhat.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse3 products
  • kdelibs3&distro=SUSE Linux Enterprise Server 11 SP4< 3.5.10-23.30.5.1
  • kdelibs3&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.5.10-23.30.5.1
  • kdelibs3&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 3.5.10-23.30.5.1
Debian2 products
  • arts< 1.5.9-3+deb6u1
  • kdelibs< 3.5.10.dfsg.1-5+deb6u1
Artsproject1 product
Kde1 product

4 vendors · 7 products

References

4 links