CVE-2016-10369
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local...
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
CVE-2016-10369- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-284
- Updated
- 2026-11-02
CVE List No score
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
CVE-2016-10369- Updated
- 2026-11-02
EUVDEUVD-2016-1551 No score
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
EUVD-2016-1551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rw5r-82jx-qr25
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local...
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
GHSA-rw5r-82jx-qr25- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-284
- Updated
- 2026-11-02
OSVALPINE-CVE-2016-10369
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
ALPINE-CVE-2016-10369- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
CVE-2016-10369- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVDEBIAN-CVE-2016-10369
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
DEBIAN-CVE-2016-10369- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-10369
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).
- Record
UBUNTU-CVE-2016-10369- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0138 No score
Updated lxterminal package fixes security vulnerability
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control). (CVE-2016-10369)
- Record
MGASA-2017-0138- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11031-1 No score
lxterminal-0.4.0-1.5 on GA media
These are all security issues fixed in the lxterminal-0.4.0-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11031-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lxterminalAlpine:v3.10 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.11 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.12 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.13 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.14 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.15 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.16 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.17 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.18 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.19 |
before 0.3.0-r1 | 0.3.0-r1 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
lxterminalAlpine:v3.20 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.21 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.22 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.23 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.24 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.6 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.7 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.8 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalAlpine:v3.9 |
before 0.3.0-r1 | 0.3.0-r1 |
lxterminalDebian:12 |
before 0.3.0-2 | 0.3.0-2 |
lxterminalDebian:13 |
before 0.3.0-2 | 0.3.0-2 |
lxterminalDebian:14 |
before 0.3.0-2 | 0.3.0-2 |
lxterminalDebian:7 |
before 0.1.11-4+deb7u1, plus listed versions 0.1.11-4 |
0.1.11-4+deb7u1 |
lxterminalMageia:5 |
before 0.1.11-5.2.mga5 | 0.1.11-5.2.mga5 |
lxterminalUbuntu:14.04:LTS |
before 0.1.11-4ubuntu3.1, plus listed versions 0.1.11-4ubuntu3 |
0.1.11-4ubuntu3.1 |
lxterminalUbuntu:16.04:LTS |
before 0.2.0-1ubuntu0.1, plus listed versions 0.2.0-1 |
0.2.0-1ubuntu0.1 |
lxterminalopenSUSE:Tumbleweed |
before 0.4.0-1.5 | 0.4.0-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10369 is a high vulnerability (CVSS 7.8) in Lxterminal Project Lxterminal, published May 8, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. Fixed in lxterminal 0.3.0-r1.
References
git.lxde.org/gitweb?p=lxde/lxterminal.git%3Ba=commit%3Bh=f99163c6ff8b2f57c5f37b1ce5d62cf7450d4648
unix.stackexchange.com/questions/333539/lxterminal-in-the-netstat-output/333578
bugs.debian.org/862098
nvd.nist.gov/vuln/detail/CVE-2016-10369
github.com/advisories/GHSA-rw5r-82jx-qr25
Show 8 moreShow less
security.alpinelinux.org/vuln/CVE-2016-10369
security-tracker.debian.org/tracker/CVE-2016-10369
advisories.mageia.org/MGASA-2017-0138.html
bugs.mageia.org/show_bug.cgi?id=20815
openwall.com/lists/oss-security/2017/05/09/1
ubuntu.com/security/CVE-2016-10369
cve.org/CVERecord?id=CVE-2016-10369
suse.com/security/cve/CVE-2016-10369