What’s Vulnerable › Vulnerabilities

CVE-2022-45062

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-09 · updated 2026-06-17
• Weakness: CWE-88

Description

In Xfce xfce4-settings before 4.16.4 and 4.17.x before 4.17.1, there is an argument injection vulnerability in xfce4-mime-helper.

Affected products

• Debian Linux: 11.0
• Fedoraproject Fedora: 37
• Xfce4-Settings: before 4.16.4; 4.17.0 — fixed in 4.16.4

How to fix

Upgrade to a fixed version: Xfce4-Settings 4.16.4. Check the vendor advisory for mitigations.

References

• https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/55e3c5fb667e96ad1412cf249879262b369d28d7
• https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/f34a92a84f96268ad24a7a13fd5edc9f1d526110
• https://gitlab.xfce.org/xfce/xfce4-settings/-/issues/390
• https://gitlab.xfce.org/xfce/xfce4-settings/-/tags
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGTGTTPFHDUB3EZHVKDK4H32QUUYPPFF/
• https://security.gentoo.org/glsa/202305-05
• https://www.debian.org/security/2022/dsa-5296
• https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/55e3c5fb667e96ad1412cf249879262b369d28d7
• https://gitlab.xfce.org/xfce/xfce4-settings/-/commit/f34a92a84f96268ad24a7a13fd5edc9f1d526110
• https://gitlab.xfce.org/xfce/xfce4-settings/-/issues/390
• https://gitlab.xfce.org/xfce/xfce4-settings/-/tags
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGTGTTPFHDUB3EZHVKDK4H32QUUYPPFF/

Get alerted when CVE-2022-45062 or the next vulnerability affects your stack