CVE-2014-3856

Опубликовано: 28 янв. 2020

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

Ссылки

https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
https://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
https://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fishshell:fish:*:*:*:*:*:*:*:*

Версия от 1.23.0 (включая) до 2.1.1 (исключая)

EPSS

Процентиль: 22%

0.0029

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2014-3856

CVSS3: 7

ubuntu

почти 7 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

CVE-2014-3856

CVSS3: 7

debian

почти 7 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does ...

GHSA-mh78-c455-hh2q

github

больше 4 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

ALT-PU-2014-2090

CVSS3: 7.8

altlinux

около 12 лет назад

ALT-PU-2014-2090: package `fish` update to version 2.1.1-alt1.git20140907

openSUSE-SU-2019:2188-1

suse-cvrf

около 7 лет назад

Security update for fish3

EPSS

Процентиль: 22%

0.0029

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362