CVE-2022-40299

In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure…

published September 9, 2022

CVSS
—
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathnames; this CVE Record is not about the lack of a safe temporary-file creation capability in the Singular language.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.6th percentile
Published
2022-09-09T00:18Z
EPSS history
Timeline
  • 09 SEP 00:18Z
    In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure…
    cvelistv5