CVE-2014-2524
Summary
| CVE | CVE-2014-2524 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2014-08-20 14:55:00 UTC |
|---|
| Updated | 2018-10-30 16:27:00 UTC |
|---|
| Description | The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] Fedora 20 Update: readline-6.2-10.fc20 |
FEDORA |
lists.fedoraproject.org |
Third Party Advisory |
| oss-sec: Insecure usage of temporary files in GNU Readline |
MLIST |
seclists.org |
Mailing List, Third Party Advisory |
| [Bug-readline] Readline-6.3 Official Patch 3 |
MLIST |
lists.gnu.org |
Patch, Vendor Advisory |
| oss-sec: Re: Insecure usage of temporary files in GNU Readline |
MLIST |
seclists.org |
Mailing List, Third Party Advisory |
| Support / Security / Advisories / / MDVSA-2015:132 | Mandriva |
MANDRIVA |
www.mandriva.com |
Broken Link |
| Support / Security / Advisories / / MDVSA-2014:154 | Mandriva |
MANDRIVA |
www.mandriva.com |
Broken Link |
| Mageia Advisory: MGASA-2014-0319 - Updated readline packages fix security vulnerability |
CONFIRM |
advisories.mageia.org |
Third Party Advisory |
| Bug 1077023 – CVE-2014-2524 readline: insecure temporary file use in _rl_tropen() |
MISC |
bugzilla.redhat.com |
Issue Tracking |
| [security-announce] openSUSE-SU-2014:1226-1: critical: bash: security an |
SUSE |
lists.opensuse.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 296092 Oracle Solaris 11.4 Support Repository Update (SRU) 7.1.4 Missing (CPUJAN2019)
