CVE-2014-2524

Published: Aug 20, 2014Modified: May 6, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

Affected (19)

Products: Mageia: Mageia · Gnu: Readline · Opensuse: Opensuse · +1 more

Show all products

Mageia: Mageia · Gnu: Readline · Opensuse: Opensuse · Fedoraproject: Fedora

1 product

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mageia Mageia	Version 3.0
Mageia Mageia	Version 4.0

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Gnu Readline	Up to 6.3
Gnu Readline	Version 2.1
Gnu Readline	Version 2.2
Gnu Readline	Version 4.0
Gnu Readline	Version 4.1
Gnu Readline	Version 4.2
Gnu Readline	Version 4.2 a
Gnu Readline	Version 4.3
Gnu Readline	Version 5.0
Gnu Readline	Version 5.1
Gnu Readline	Version 5.2
Gnu Readline	Version 6.0
Gnu Readline	Version 6.1
Gnu Readline	Version 6.2

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 20

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (18)

http://advisories.mageia.org/MGASA-2014-0319.html

Source: cve@mitre.org

Third Party Advisory

http://lists.gnu.org/archive/html/bug-readline/2014-03/msg00057.html

Source: cve@mitre.org

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html

Source: cve@mitre.org

Third Party Advisory

http://seclists.org/oss-sec/2014/q1/579

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/oss-sec/2014/q1/587

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:154

Source: cve@mitre.org

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2015:132

Source: cve@mitre.org

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=1077023

Source: cve@mitre.org

Issue Tracking

https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135686.html

Source: cve@mitre.org

Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0319.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.gnu.org/archive/html/bug-readline/2014-03/msg00057.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://seclists.org/oss-sec/2014/q1/579

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/oss-sec/2014/q1/587

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2014:154

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.mandriva.com/security/advisories?name=MDVSA-2015:132

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=1077023

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://lists.fedoraproject.org/pipermail/package-announce/2014-July/135686.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.