Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2014-2893

Опубликовано: 15 апр. 2014
Источник: redhat
CVSS2: 2.1
EPSS Низкий

Описание

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6mesa-private-llvmNot affected
Red Hat Enterprise Linux 7mesa-private-llvmNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-377
Дефект:
CWE-367
Дефект:
CWE-732
https://bugzilla.redhat.com/show_bug.cgi?id=1088105llvm: insecure temporary file handling in clang's scan-build utility

EPSS

Процентиль: 34%
0.00407
Низкий

2.1 Low

CVSS2

Связанные уязвимости

ubuntu
больше 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

nvd
больше 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

debian
больше 12 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and ...

github
около 4 лет назад

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

EPSS

Процентиль: 34%
0.00407
Низкий

2.1 Low

CVSS2