CVE-2014-3856

Опубликовано: 28 янв. 2020

Источник: nvd

CVSS3: 7

CVSS2: 4.4

EPSS Низкий

Описание

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

Ссылки

https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
https://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory
https://github.com/fish-shell/fish-shell/issues/1437
Third Party Advisory
https://github.com/fish-shell/fish-shell/releases/tag/2.1.1
Release Notes
https://www.openwall.com/lists/oss-security/2014/04/28/4
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fishshell:fish:*:*:*:*:*:*:*:*

Версия от 1.23.0 (включая) до 2.1.1 (исключая)

EPSS

Процентиль: 21%

0.0029

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2014-3856

CVSS3: 7

ubuntu

больше 6 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

CVE-2014-3856

CVSS3: 7

debian

больше 6 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does ...

GHSA-mh78-c455-hh2q

github

больше 4 лет назад

The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.

openSUSE-SU-2019:2188-1

suse-cvrf

почти 7 лет назад

Security update for fish3

openSUSE-SU-2019:2177-1

suse-cvrf

почти 7 лет назад

Security update for fish3

EPSS

Процентиль: 21%

0.0029

Низкий

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-362