CVE catalog

CVE-2012-0842

surf: CVE-2012-0842

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.38% · Oct 25, 2026

surf: cookie jar has read access from other local user

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansurfsid2.1+git20250419-2fixed
Debiansurfforky2.1+git20250419-2fixed
Debiansurftrixie2.1+git20250419-1fixed
Debiansurfbookworm2.1+git20221016-4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansurfsourcesid0.4.1-6not yet assignedNot reported[659296]
Debiansurfsourceforky0.4.1-6not yet assignedNot reported[659296]
Debiansurfsourcetrixie0.4.1-6not yet assignedNot reported[659296]
Debiansurfsourcebookworm0.4.1-6not yet assignedNot reported[659296]

[Debian bug #659296]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [surf]Fixed
    Details (2)

    • 2.1+git20221016-4 · amd64 · bookworm

      Fixed · Fixed: 0.4.1-6

      dsa · surf · debian · bookworm; dsa · surf · debian · 12

    • 2.1+git20221016-4 · arm64 · bookworm

      Fixed · Fixed: 0.4.1-6

      dsa · surf · debian · bookworm; dsa · surf · debian · 12

[Debian 13 (Trixie)]

  • [surf]Fixed
    Details (2)

    • 2.1+git20250419-1 · amd64 · trixie

      Fixed · Fixed: 0.4.1-6

      dsa · surf · debian · 13

    • 2.1+git20250419-1 · arm64 · trixie

      Fixed · Fixed: 0.4.1-6

      dsa · surf · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]