What’s Vulnerable › Vulnerabilities

CVE-2017-8934

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-05-15 · updated 2026-06-17
• Weakness: CWE-20

Description

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Affected products

• Pcmanfm Project Pcmanfm: 1.2.5

References

• https://bugs.debian.org/862571
• https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git%3Ba=commit%3Bh=bc8c3d871e9ecc67c47ff002b68cf049793faf08
• https://bugs.debian.org/862571
• https://git.lxde.org/gitweb/?p=lxde/pcmanfm.git%3Ba=commit%3Bh=bc8c3d871e9ecc67c47ff002b68cf049793faf08

Get alerted when CVE-2017-8934 or the next vulnerability affects your stack