debian/liferea vulnerabilities

Latest debian/liferea CVEs

Newest publication first

1. CVE-2023-1350 liferea Feed Enrichment update.c update_job_run os command injection

   Published 2023-03-11

   Critical·CVSS 9.8 EPSS 2.3%

   A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os c...

2. DTSA-107-1 liferea - multiple vulnerabilities

   Published 2008-01-05

   Unknown

3. CVE-2007-5751 Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.

   Published 2007-10-31

   Low·CVSS 2.1 EPSS 0.34%

   Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials.

4. CVE-2005-4791 Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or...

   Published 2006-04-26

   Low·CVSS 2.1 EPSS 0.45%

   Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary code via (1) liferea or (2) banshee.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.