Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2014-3856

Опубликовано: 28 янв. 2020
Источник: debian
EPSS Низкий

Описание

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
fishfixed2.1.1-1package
fishno-dsasqueezepackage
fishno-dsawheezypackage

Примечания

  • https://github.com/fish-shell/fish-shell/issues/1437

EPSS

Процентиль: 30%
0.00109
Низкий

Связанные уязвимости

CVSS3: 7
ubuntu
около 6 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

CVSS3: 7
nvd
около 6 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

github
больше 3 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

suse-cvrf
больше 6 лет назад

Security update for fish3

suse-cvrf
больше 6 лет назад

Security update for fish3

EPSS

Процентиль: 30%
0.00109
Низкий