Lucene search
K

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

🗓️ 03 Sep 2025 21:14:33Reported by MicrosoftType 
mscve
 mscve
🔗 msrc.microsoft.com👁 4 Views

Pip 1.3 to 1.5.6 allows local users to cause denial of service by creating /tmp/pip-build-* for others.

Related
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Python affect PowerKVM (CVE-2013-5123, CVE-2014-8991)
18 Jun 201801:29
ibm
CVE
CVE-2014-8991
24 Nov 201415:00
cve
Cvelist
CVE-2014-8991
24 Nov 201415:00
cvelist
Debian CVE
CVE-2014-8991
24 Nov 201415:00
debiancve
EUVD
EUVD-2014-0044
7 Oct 202500:30
euvd
Github Security Blog
pip lack of randomness in build directory
13 May 202201:11
github
Mageia
Updated python-pip packages fix CVE-2014-8991
14 Jan 201521:55
mageia
NCSC
Vulnerabilities fixed in Juniper Junos Space
19 Apr 202100:00
ncsc
NVD
CVE-2014-8991
24 Nov 201415:59
nvd
OpenVAS
Mageia: Security Advisory (MGASA-2015-0023)
28 Jan 202200:00
openvas
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Sep 2025 21:14Current
9.3High risk
Vulners AI Score9.3
CVSS 22.1
EPSS0.00072
4