CVE-2011-4349
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord...
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
Exploit likelihood
What each source reports
NVD Score used
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
CVE-2011-4349- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
CVE-2011-4349- Updated
- 2026-11-02
EUVDEUVD-2011-4280 No score
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
EUVD-2011-4280- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mhjw-433w-2gw5 No score
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord...
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
GHSA-mhjw-433w-2gw5- Weakness
- CWE-89
- Updated
- 2026-11-02
OSV No score
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
CVE-2011-4349- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4349 No score
Multiple SQL injection vulnerabilities in (1) cd-mapping-db.c and (2) cd-device-db.c in colord before 0.1.15 allow local users to execute arbitrary SQL commands via vectors related to color devices and (a) device id, (b) property, or (c) profile id.
- Record
DEBIAN-CVE-2011-4349- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10103-1 No score
colord-1.3.4-1.1 on GA media
These are all security issues fixed in the colord-1.3.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10103-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4349 is a medium vulnerability (CVSS 4.6) in Freedesktop Colord, published December 10, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in colord 0.1.15-1.
References
securityfocus.com/bid/50814
ubuntu.com/usn/usn-1289-1
secunia.com/advisories/46940
openwall.com/lists/oss-security/2011/11/25/4
bugzilla.redhat.com/show_bug.cgi?id=757171
Show 10 moreShow less
gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b
lists.fedoraproject.org/pipermail/package-announce/2011-December/070518.html
bugs.freedesktop.org/show_bug.cgi?id=42904
nvd.nist.gov/vuln/detail/CVE-2011-4349
github.com/advisories/GHSA-mhjw-433w-2gw5
security-tracker.debian.org/tracker/CVE-2011-4349
suse.com/security/cve/CVE-2011-4349