The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack…

Description

The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.

Scores

EPSS (exploitation in 30 days)

0.33% · top 73% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.3.

Weakness

• n/a
• CWE-59 (opens in a new tab)

Affected products

• n/a

  • affected n/a

References (9)

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=612035 (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20110209 CVE request for feh (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• https://github.com/derf/feh/issues/#issue/32 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://derf.homelinux.org/git/feh/commit/?id=29ab0855f044ef2fe9c295b72abefcb37f0861a5 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 43221 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• https://bugs.launchpad.net/ubuntu/+source/feh/+bug/607328 (opens in a new tab)x_refsource_CONFIRMx_transferred
• https://bugzilla.redhat.com/show_bug.cgi?id=676389 (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20110209 Re: CVE request for feh (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• https://derf.homelinux.org/git/feh/commit/?id=23421a86cc826dd30f3dc4f62057fafb04b3ac40 (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Record last updated 16 Sept 2024, 18:24 UTC.