Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-2893

Опубликовано: 15 апр. 2014
Источник: redhat
CVSS2: 2.1
EPSS Низкий

Описание

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6mesa-private-llvmNot affected
Red Hat Enterprise Linux 7mesa-private-llvmNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-377
Дефект:
CWE-367
Дефект:
CWE-732
https://bugzilla.redhat.com/show_bug.cgi?id=1088105llvm: insecure temporary file handling in clang's scan-build utility

EPSS

Процентиль: 25%
0.00084
Низкий

2.1 Low

CVSS2

Связанные уязвимости

ubuntu
почти 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

nvd
почти 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

debian
почти 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and ...

github
больше 3 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

EPSS

Процентиль: 25%
0.00084
Низкий

2.1 Low

CVSS2