VYPR

StateSaver

by Ubuntu

CVEs (1)

  • CVE-2014-1420LowSep 11, 2020
    risk 0.25cvss 3.8epss 0.01

    On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the O_EXCL flag. An attacker could exploit this to launch a symlink attack, though this is…