CVE-2014-2906

Опубликовано: 28 янв. 2020

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.

Ссылки

http://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
http://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fishshell:fish:*:*:*:*:*:*:*:*

Версия от 1.16.0 (включая) до 2.1.1 (исключая)

EPSS

Процентиль: 24%

0.00314

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2014-2906

CVSS3: 7

ubuntu

почти 7 лет назад

CVE-2014-2906

CVSS3: 7

debian

почти 7 лет назад

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does no ...

GHSA-7848-7877-wpjg

github

больше 4 лет назад

ALT-PU-2014-2090

CVSS3: 7.8

altlinux

около 12 лет назад

ALT-PU-2014-2090: package `fish` update to version 2.1.1-alt1.git20140907

openSUSE-SU-2019:2188-1

suse-cvrf

около 7 лет назад

Security update for fish3

EPSS

Процентиль: 24%

0.00314

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362