CVE-2013-6494

Published: Dec 2, 2014Modified: May 6, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

fedup 0.9.0 in Fedora 19, 20, and 21 uses a temporary directory with a static name for its download cache, which allows local users to cause a denial of service (prevention of system updates).

Affected (1)

Products: Fedup Project: Fedup

Fedup Project

1 product

Fedup

Configuration A

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Fedup Project Fedup	Version 0.9.0

Running on/with	Platform Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20
Fedoraproject Fedora	Version 21

Related CWEs

CWE-17

References (12)

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141698.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142698.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142933.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/70874

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1066679

Source: secalert@redhat.com

Vendor Advisory

https://github.com/wgwoods/fedup/issues/44

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141698.html