PatchTheCVEimwheel vulnerabilities and fixes
Recent CVEs affecting imwheel, with upgrade or downgrade steps. 2 tracked.
imwheel has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2004-12-31. Highest priority: CVE-2004-2698 (score 39/100).
- CVE-2004-2698 MEDIUM 6.9 UPGRADE Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause
- CVE-2000-1190 LOW 2.1 MITIGATE imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .im
FAQ
How do I fix imwheel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is imwheel being exploited right now?
None of the tracked imwheel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which imwheel CVE should I patch first?
CVE-2004-2698 currently ranks highest (39/100): Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause.