Every CVE Search/ Get API key

CVE-2017-8934

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of...

5.5 MediumFix available

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.33%Down 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
CVE-2017-8934
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
CVE-2017-8934
Updated
2026-11-02
EUVDEUVD-2017-17874 No score

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
EUVD-2017-17874
Updated
2026-11-03
GitHub AdvisoriesGHSA-qr95-q293-28w5 5.5

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of...

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
GHSA-qr95-q293-28w5
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
OSV 5.5

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
CVE-2017-8934
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-8934 5.5

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
DEBIAN-CVE-2017-8934
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2017-8934 5.5

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).

Record
UBUNTU-CVE-2017-8934
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2017-0154 No score

Updated pcmanfm packages fix security vulnerability

PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability). (CVE-2017-8934

Record
MGASA-2017-0154
Updated
2026-11-02
OSVopenSUSE-SU-2022:10001-1 No score

Security update for pcmanfm

This update for pcmanfm fixes the following issues:

update to 1.3.2:

  • Fixed case when some keyboard shortcuts stopped working: Alt+Home, Alt+Up
  • Fixed sytem reboot delayed for 90 seconds in some cases

new upstream release of pcmanfm 1.3.1

  • fixed crash on reload while directory changes
  • changed size of large thumbnails to 512
  • added application/gzip to archivers.list
  • added image/x-compressed-xcf to archivers.list
  • allowed bigger sizes of icons and thumbnails

new upstream release of pcmanfm 1.3.0

  • Fixed potential access violation, use runtime user dir instead of tmp diri for single instance socket. boo#1039140 CVE-2017-8934
  • Fixed an issue with losing icons on desktop, when file name has a ‘[‘ char.
  • Added a missing tooltip for ‘New Window’ toolbar button.
  • Fixed an issue when single instance socket directory did not exist
Record
openSUSE-SU-2022:10001-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11724-1 No score

pcmanfm-1.3.2-2.1 on GA media

These are all security issues fixed in the pcmanfm-1.3.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11724-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pcmanfm
Debian:12
 before 1.2.5-3
1.2.5-3
pcmanfm
Debian:13
 before 1.2.5-3
1.2.5-3
pcmanfm
Debian:14
 before 1.2.5-3
1.2.5-3
pcmanfm
Mageia:5
 before 1.2.3-2.3.mga5
1.2.3-2.3.mga5
pcmanfm
Ubuntu:14.04:LTS
 before 1.2.0-1ubuntu0.1, plus listed versions
1.1.2-0ubuntu11.1.2-11.2.0-0ubuntu11.2.0-0ubuntu21.2.0-1
1.2.0-1ubuntu0.1
pcmanfm
Ubuntu:16.04:LTS
 before 1.2.4-1ubuntu0.1, plus listed versions
1.2.3-1.11.2.4-1
1.2.4-1ubuntu0.1
pcmanfm
SUSE:Package Hub 15 SP3
 before 1.3.2-bp153.2.3.1
1.3.2-bp153.2.3.1
pcmanfm
openSUSE:Leap 15.3
 before 1.3.2-bp153.2.3.1
1.3.2-bp153.2.3.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-8934 is a medium vulnerability (CVSS 5.5) in Pcmanfm Project Pcmanfm, published May 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. Fixed in pcmanfm 1.2.5-3.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open