What’s Vulnerable › Vulnerabilities

CVE-2016-10369

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-08 · updated 2026-06-17
• Weakness: CWE-284

Description

unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

Affected products

• Lxterminal Project Lxterminal: through 0.3.0

References

• https://bugs.debian.org/862098
• https://git.lxde.org/gitweb/?p=lxde/lxterminal.git%3Ba=commit%3Bh=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648
• https://unix.stackexchange.com/questions/333539/lxterminal-in-the-netstat-output/333578
• https://bugs.debian.org/862098
• https://git.lxde.org/gitweb/?p=lxde/lxterminal.git%3Ba=commit%3Bh=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648
• https://unix.stackexchange.com/questions/333539/lxterminal-in-the-netstat-output/333578

Get alerted when CVE-2016-10369 or the next vulnerability affects your stack