CVE catalog

CVE-2017-8934

pcmanfm: CVE-2017-8934

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 25, 2026

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpcmanfmsid1.4.0-1fixed
Debianpcmanfmforky1.4.0-1fixed
Debianpcmanfmtrixie1.4.0-1fixed
Debianpcmanfmbookworm1.3.2-1fixed
Susepcmanfmpackage hub 15 sp31.3.2-bp153.2.3.1fixed
Opensusepcmanfmleap 15.31.3.2-bp153.2.3.1fixed
Ubuntupcmanfm14.041.1.2-0ubuntu1vulnerable
Ubuntupcmanfm14.041.1.2-1vulnerable
Ubuntupcmanfm14.041.2.0-0ubuntu1vulnerable
Ubuntupcmanfm14.041.2.0-0ubuntu2vulnerable
Ubuntupcmanfm14.041.2.0-1vulnerable
Ubuntupcmanfm14.041.2.0-1ubuntu0.1fixed
Ubuntupcmanfm16.041.2.3-1.1vulnerable
Ubuntupcmanfm16.041.2.4-1vulnerable
Ubuntupcmanfm16.041.2.4-1ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpcmanfmsourcesid1.2.5-3lowNot reported[862571]
Debianpcmanfmsourceforky1.2.5-3lowNot reported[862571]
Debianpcmanfmsourcetrixie1.2.5-3lowNot reported[862571]
Debianpcmanfmsourcebookworm1.2.5-3lowNot reported[862571]
Susepcmanfmrpmpackage hub 15 sp31.3.2-bp153.2.3.1Not reportedOPENSUSE-SU-2022:10001-1Not reported
Opensusepcmanfmrpmleap 15.31.3.2-bp153.2.3.1Not reportedOPENSUSE-SU-2022:10001-1Not reported
Ubuntupcmanfmdeb14.041.2.0-1ubuntu0.1Not reportedUBUNTU-CVE-2017-8934Not reported
Ubuntupcmanfmdeb16.041.2.4-1ubuntu0.1Not reportedUBUNTU-CVE-2017-8934Not reported

[Debian bug #862571]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [pcmanfm]Fixed
    Details (2)

    • 1.3.2-1 · amd64 · bookworm

      Fixed · Fixed: 1.2.5-3

      dsa · pcmanfm · debian · bookworm; dsa · pcmanfm · debian · 12

    • 1.3.2-1 · arm64 · bookworm

      Fixed · Fixed: 1.2.5-3

      dsa · pcmanfm · debian · bookworm; dsa · pcmanfm · debian · 12

[Debian 13 (Trixie)]

  • [pcmanfm]Fixed
    Details (2)

    • 1.4.0-1 · amd64 · trixie

      Fixed · Fixed: 1.2.5-3

      dsa · pcmanfm · debian · 13

    • 1.4.0-1 · arm64 · trixie

      Fixed · Fixed: 1.2.5-3

      dsa · pcmanfm · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]