CVE-2014-2906

Опубликовано: 28 янв. 2020

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.

Ссылки

http://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
http://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fishshell:fish:*:*:*:*:*:*:*:*

Версия от 1.16.0 (включая) до 2.1.1 (исключая)

EPSS

Процентиль: 30%

0.0011

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2014-2906

CVSS3: 7

ubuntu

около 6 лет назад

CVE-2014-2906

CVSS3: 7

debian

около 6 лет назад

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does no ...

GHSA-7848-7877-wpjg

github

больше 3 лет назад

openSUSE-SU-2019:2188-1

suse-cvrf

больше 6 лет назад

Security update for fish3

openSUSE-SU-2019:2177-1

suse-cvrf

больше 6 лет назад

Security update for fish3

EPSS

Процентиль: 30%

0.0011

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362