Improper Access Control The advisory has been revoked - it doesn't affect any version of package stalin  (opens in a new tab)


Threat Intelligence

EPSS
0.37% (30th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2510-STALIN-15027865
  • published17 Jan 2026
  • disclosed27 Jun 2017

Introduced: 27 Jun 2017

CVE-2015-8697  (opens in a new tab)
CWE-284  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:25.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream stalin package and not the stalin package as distributed by Ubuntu.

stalin 0.11-5 allows local users to write to arbitrary files.