CVEvulnerability

CVE-2014-2524

3.3 LOW Published 2014-08-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-59

Description

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

Affected configurations

• mageia mageia 3.0 • mageia mageia 4.0 • gnu readline (<= 6.3) • gnu readline 2.1 • gnu readline 2.2 • gnu readline 4.0 • gnu readline 4.1 • gnu readline 4.2 • gnu readline 4.3 • gnu readline 5.0 • gnu readline 5.1 • gnu readline 5.2 • gnu readline 6.0 • gnu readline 6.1 • gnu readline 6.2 • opensuse opensuse 12.3 • opensuse opensuse 13.1 • fedoraproject fedora 20

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References