CVE-2005-0070: Synaesthesia

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.

Affected products

• Synaesthesia Synaesthesia: up to and including 2.1

Published 2005-05-02. Last modified 2026-06-16.