13 matches found
coreutils (>=0.0.14, <=0.0.16) potentially affected by CVE-2026-35341 via uu_mkfifo (>=0.0.14, <=0.0.16)
uumkfifo CARGO version =0.0.14, =0.0.14, =0.0.16 Source cves: CVE-2026-35341 Source advisory: OSV:GHSA-PMF6-RCX4-V53V...
mkfifo: permissions of an existing file are changed after FIFO creation fails
When mkfifo fails e.g. target already exists, the code shows an error but is missing a continue;, so it falls through to fs::setpermissions and changes the permissions of the pre-existing file to the default FIFO mode 0o666 & umask - 0644. $ touch secret; chmod 000 secret $ coreutils mkfifo secre...
CVE-2026-35341 vulnerabilities
Vulnerabilities for packages: uutils...
CVE-2026-35341
creationtimestamp| type| source ---|---|--- 2026-04-22 19:23:16+00:00| seen| Telegram/y1XO5mBm2flLcrjS5YpFLtlumq47M984z8tJCHSwnxFgvg 2026-07-06 23:41:59+00:00| seen| https://gist.github.com/alon710/d7b15b70ec7c7ecc30109bf6cff7b4d3 2026-07-07 00:00:02+00:00| seen|...
DEBIAN-CVE-2026-35341
A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target path, it fails to terminate the operation for that path and continues to execute a follow-up...
CVE-2026-35341
A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target path, it fails to terminate the operation for that path and continues to execute a follow-up...
CVE-2026-35341
A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because a file already exists at the target path, it fails to terminate the operation for that path and continues to execute a follow-up...
Linux Distros Unpatched Vulnerability : CVE-2026-35341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. When mkfifo fails to create a FIFO because...
MAL-2025-35341 Malicious code in test-mlw2-fired-diver (npm)
The package test-mlw2-fired-diver was found to contain malicious code...
CVE-2023-35341 Microsoft DirectMusic Information Disclosure Vulnerability
...
CVE-2023-35341
Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.