Описание
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | ignored | end of life |
| devel | released | 3.17.3-4ubuntu1 |
| edgy | released | 3.17.3-4ubuntu1 |
| feisty | released | 3.17.3-4ubuntu1 |
| gutsy | released | 3.17.3-4ubuntu1 |
| hardy | released | 3.17.3-4ubuntu1 |
| intrepid | released | 3.17.3-4ubuntu1 |
| jaunty | released | 3.17.3-4ubuntu1 |
| karmic | released | 3.17.3-4ubuntu1 |
| upstream | needs-triage |
Показывать по
Ссылки на источники
EPSS
1.2 Low
CVSS2
Связанные уязвимости
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
spread uses a temporary file with a static filename based on the port ...
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
EPSS
1.2 Low
CVSS2