CVE-2022-27816

Description

References

• openwall.com/lists/oss-security/2022/04/14/1 · Exploit
• waycrate/swhkd commit 0b620a0 · Patch
• waycrate/swhkd release · Release Notes

swhkd 的其他漏洞

• CVE-2022-27817中危 4.4SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of f…
• CVE-2022-27814低危 3.3SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.
• CVE-2022-27819中危 5.3SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaust…
• CVE-2022-27818严重 9.1SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.
• CVE-2022-27815高危 7.8SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service.