CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-09-17

Last modified

2024-08-04

Weaknesses

CWE-426

Affected products

• Seatd (Seatd Project)

References

• https://lists.sr.ht/~kennylevinsen/seatd-announce/%3CGJ2IZQ.HCKS1J0LSI803%40kl.wtf%3E