Skip to content

Product

openSUSE cscreen vulnerabilities

2 published CVES affecting openSUSE cscreen, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest openSUSE cscreen CVEs

Newest publication first

  1. CVE-2022-21946 suddoers configuration for cscreen not restrictive enough

    Published
    MediumCVSS 5.3 EPSS 0.26%

    A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects:...

  2. CVE-2022-21945 cscreen: usage of fixed path /tmp/cscreen.debug

    Published
    MediumCVSS 6.1 EPSS 0.24%

    A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.