CVE catalog

CVE-2020-16143

seafile-client: CVE-2020-16143

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
0.44% · Oct 25, 2026

The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads exchndl.dll from the current working directory.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianseafile-clientsid9.0.20+ds1-1not affected
Debianseafile-clientforky9.0.20+ds1-1not affected
Debianseafile-clienttrixie9.0.13+ds1-1not affected
Debianseafile-clientbookworm8.0.10+ds1-2not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianseafile-clientsourcesidNot affectedunimportantNot reportedNot reported
Debianseafile-clientsourceforkyNot affectedunimportantNot reportedNot reported
Debianseafile-clientsourcetrixieNot affectedunimportantNot reportedNot reported
Debianseafile-clientsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [seafile-gui]Not affected

    Source package: [seafile-client]

    Details (2)
    • 8.0.10+ds1-2 · amd64 · bookworm

      Not affected

      dsa · seafile-client · debian · bookworm

    • 8.0.10+ds1-2 · arm64 · bookworm

      Not affected

      dsa · seafile-client · debian · bookworm

Observed:

References