UBUNTU-CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

Design/Logic Flaw

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

CVE-2020-8908

CVE-2020-8908 (Guava) : A temp directory creation vulnerability exists in all Guava versions where guava’s API com.google.common.io.Files.createTempDir() creates temporary directories that are world-readable on Unix-like systems. The issue arises because the temp dir permissions are not restricte...

CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

CVE-2020-8908 Temp directory permission issue in Guava

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

Google Guava Access Control Vulnerability

Google Guava is a U.S. Google Google company , including graphics libraries , function types , I / O and string processing , etc. of the core Java library . An Access Control Error vulnerability exists in Guava prior to version 30.0, which stems from a temporary directory creation vulnerability i...

CVE-2020-8908: Creation of Temporary File With Insecure Permissions

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...

Information Disclosure

guava is vulnerable to Information Disclosure. A folder with insecure permissions is created by the function com.google.common.io.Files.createTempDir. A local user will be able to steal secrets stored in this directory...

PT-2020-5989

Name of the Vulnerable Software and Affected Versions Guava versions prior to 30.0 Guava versions prior to 32.0.0 Description A temp directory creation vulnerability exists in Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the...

Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2018-3169, CVE-2014-7810, CVE-2018-1767)

Summary There are multiple vulnerabilities in Websphere that is used by Control Center. Vulnerability Details CVEID: CVE-2018-3169 refer to CVE-2018-10237 DESCRIPTION: Google Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the AtomicDoubleArray and...

Google Guava Unlimited Memory Allocation DoS

The vulnerability in the Java libraries of Google Guava relates to the unlimited memory allocation in the AtomicDoubleArray and CompoundOrdering classes. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

com.github.livesense:org.livesense.service.solr.configurationloader (>=1.0.3, <=1.0.5), org.ow2.sirocco.cloudmanager:sirocco-cloudmanager-connector-mock (>=0.5.0, <=0.5.1) +3 more potentially affected by CVE-2018-10237 via com.googlecode.guava-osgi:guava-osgi (10.0.0)

com.googlecode.guava-osgi:guava-osgi MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.guava-osgi:guava-osgi and may be impacted: - com.github.livesense:org.livesense.service.solr.configurationloader =1.0.3, =0.5.0,...

br.com.martinlabs:martinlabs-commons (3.4), cc.protea.foundation:foundation (>=0.1, <=0.4.1) +391 more potentially affected by CVE-2018-10237 via com.google.guava:guava-jdk5 (13.0)

com.google.guava:guava-jdk5 MAVEN version 13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava-jdk5 and may be impacted: - br.com.martinlabs:martinlabs-commons 3.4 - cc.protea.foundation:foundation =0.1, =0.1, =1.0, =1.0.16,...

GHSA-MVR2-9PJ6-7W5J Denial of Service in Google Guava

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

Denial of Service in Google Guava

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

com.github.goldin:about-maven-plugin (>=0.2.4, <=0.2.5), com.github.goldin:assert-maven-plugin (>=0.2.4, <=0.2.5) +67 more potentially affected by CVE-2018-10237 via org.sonatype.sisu:sisu-guava (0.11.1)

org.sonatype.sisu:sisu-guava MAVEN version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.sisu:sisu-guava and may be impacted: - com.github.goldin:about-maven-plugin =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4,...

com.github.goldin:about-maven-plugin (>=0.2.4, <=0.2.5), com.github.goldin:assert-maven-plugin (>=0.2.4, <=0.2.5) +67 more potentially affected by CVE-2018-10237 via org.sonatype.sisu:sisu-guava (0.11.1)

org.sonatype.sisu:sisu-guava MAVEN version 0.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.sonatype.sisu:sisu-guava and may be impacted: - com.github.goldin:about-maven-plugin =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4,...

com.github.praxissoftware.maven.plugins:features-maven-plugin (>=1.0.0, <=1.1.0), com.github.praxissoftware.rest:com.github.praxissoftware.rest.core (>=1.1.0, <=2.0.1) +99 more potentially affected by CVE-2018-10237 via com.googlecode.guava-osgi:guava-osgi (>=11.0.0, <=11.0.1)

com.googlecode.guava-osgi:guava-osgi MAVEN version =11.0.0, =1.0.0, =1.1.0, =1.5, =1.5, =1.5, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2018-10237 Source advisory: GHSA-MVR2-9PJ6-7W5J...