← Back

Gpm

gpm

Vendor: Alessandro Rubini • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Alessandro Rubini
1Gpm
Apr 16, 2026
Dec 27, 2001
N/A· v4
N/A· v3
7.2 HIGH· v2
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
4Alessandro Rubini
DebianRedhat+1 more
4Debian Linux
GpmLinux+1 more
Apr 16, 2026
Mar 22, 2000
N/A· v4
N/A· v3
7.2 HIGH· v2
gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a utility from gpm-root.