CVE-2014-2524

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a…

published August 20, 2014

CVSS
—
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.1th percentile
Published
2014-08-20T14:00Z
EPSS history
Timeline
  • 20 AUG 14:00Z
    The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a…
    cvelistv5