GCVE - cpe:2.3:a:ktsuss_project:ktsuss:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ktsuss_project:ktsuss:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ktsuss Project (`37d38ea0-e28f-564b-bf3e-b589361f7e81`)
Product	Ktsuss (`1ed5bc09-676e-52f4-b611-eeb019b76db1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/nomius/ktsuss`	purl2cpe	2026-06-01 10:12:57.751288
`pkg:rpm/opensuse/ktsuss`	purl2cpe	2026-06-01 10:12:57.751292

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2922`	vulnerable	2026-06-08 04:58:09.654996	Details available ktsuss versions 1.4 and prior spawns the GTK interface to run as root. This can allow a local attacker to escalate privileges to root and use the "GTK_MODULES" environment variable to possibly execute arbitrary code. Published: 2019-11-19T18:08:30.000Z Updated: 2024-08-06T23:15:32.119Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2011-2922 https://access.redhat.com/security/cve/cve-2011-2922 https://packetstormsecurity.com/files/cve/CVE-2011-2922 https://www.securityfocus.com/bid/49151 https://lwn.net/Articles/477678/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2921`	vulnerable	2026-06-08 04:58:09.654528	Details available ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges. Published: 2019-11-19T16:57:33.000Z Updated: 2024-08-06T23:15:31.972Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/154307/ktsuss-Suid-Privilege-Escalation.html https://security-tracker.debian.org/tracker/CVE-2011-2921 https://access.redhat.com/security/cve/cve-2011-2921	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.