PatchTheCVEappimage vulnerabilities
Recent CVEs affecting appimage products. 2 tracked.
appimage has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-12-02. Highest priority: CVE-2020-25265 (score 43/100).
- CVE-2020-25266 MEDIUM 5.5 UPGRADE AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage
- CVE-2020-25265 MEDIUM 6.5 UPGRADE AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file
FAQ
How do I fix appimage vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is appimage being exploited right now?
None of the tracked appimage CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which appimage CVE should I patch first?
CVE-2020-25265 currently ranks highest (43/100): AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file.