Lucene search
HistoryJun 02, 2015 - 2:59 p.m.
CVE-2015-4156
cve-2015-4156
gnu parallel
symlink attack
security vulnerability
6.5 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| opensuse:opensuse | opensuse | eq | 13.1 |
| opensuse:opensuse | opensuse | eq | 13.2 |
| gnu:parallel | gnu parallel | le | 20150322 |
Related
cvelist
cvelist
CVE-2015-4156
2015-06-02 14:00:00
prion
prion
Arbitrary file deletion
2015-06-02 14:59:00
debiancve
debiancve
CVE-2015-4156
2015-06-02 14:59:00
ubuntucve
ubuntucve
CVE-2015-4156
2015-06-02 00:00:00
6.5 Medium
AI Score
Confidence
Low
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-4156