CVE-2024-5742CWE-59

CVE-2024-5742

Medium · published June 12, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2024-06-12T13:15Z
Affected products (5)
ProductVersionsFixed in
gnu/nano≥ 2.2.0, < 8.08.0
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (8)
https://access.redhat.com/errata/RHSA-2024:6986 · [email protected]https://access.redhat.com/errata/RHSA-2024:9430 · [email protected]https://access.redhat.com/security/cve/CVE-2024-5742 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2278574 · [email protected]https://access.redhat.com/security/cve/CVE-2024-5742 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2278574 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00006.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 12 JUN 08:53Z
    Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file
    cvelistv5