CVE-2014-2524
Low
Description
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
SeverityLow
CVSS3.3
Exploit probability—
Product
Gnu Readline
PublishedAug 20, 2014
First seenAug 20, 2014
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu readline | v ≤ 6.3, 2.1, 2.2, 4.0, 4.1, 4.2, 4.3, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2 | — |
| mageia mageia | 3.0, 4.0 | — |
| opensuse opensuse | 12.3, 13.1 | — |
| fedoraproject fedora | 20 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.