CVE-2015-4037

qemu: insecure temporary file use in /net/slirp.c

The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Qemu

Products

Qemu

CVE-2014-0135

rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Redhat Theforeman

Products

Satellite Satellite Capsule Kafo

CVE-2014-1402

python-jinja2: FileSystemBytecodeCache insecure cache temporary file use

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pocoo Redhat

Products

Jinja2 Enterprise Linux Rhel Software Collections

CVE-2014-1831

rubygem-passenger: insecure use of temporary files

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Phusion

Products

Passenger

CVE-2014-1832

rubygem-passenger: insecure use of temporary files

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Phusion

Products

Passenger

CVE-2014-1875

perl-Capture-Tiny: insecure temporary file usage

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Cspan

Products

Capture-tiny

CVE-2014-1932

python-imaging: insecure temporary file creation

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Python Pythonware

Products

Pillow Python Imaging Library

CVE-2014-2524

readline: insecure temporary file use in _rl_tropen()

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Gnu Mageia and 1 more

Products

Fedora Readline Mageia and 1 more

CVE-2014-2893

llvm: insecure temporary file handling in clang's scan-build utility

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Llvm Opensuse

Products

Clang Opensuse

CVE-2014-3421

emacs: multiple temporary file issues

lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3422

emacs: multiple temporary file issues

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3423

emacs: multiple temporary file issues

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3424

emacs: multiple temporary file issues

lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3486

CFME: SSH Utility insecure tmp file creation leading to code execution as root

The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Cloudforms 3.0 Management Engine Cloudforms Managementengine

CVE-2014-3981

php: insecure temporary file use in the configure script

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Php

Products

Php

CVE-2014-4038

ppc64-diag: multiple temporary file races

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Ppc64-diag Project Redhat Suse

Products

Ppc64-diag Enterprise Linux Enterprise Linux Server and 1 more

CVE-2014-4039

ppc64-diag: multiple temporary file races

ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz, which allows local users to obtain sensitive information by reading files in this archive, as demonstrated by /var/log/messages and /etc/yaboot.conf.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Ppc64-diag Project Redhat Suse

Products

Ppc64-diag Enterprise Linux Enterprise Linux Server and 1 more

CVE-2014-8991

python-pip: local DoS vulnerability

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Oracle Pypa

Products

Solaris Pip

CVE-2016-6153

sqlite: Tempdir selection vulnerability

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Opensuse Sqlite

Products

Fedora Leap Sqlite

CVE-2014-0012

python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pocoo

Products

Jinja2