Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2022/05/17 1:27 a.m.•30 views

GHSA-7372-Q459-JXHR pyxdg Arbitrary File Overwrite via Race Condition

Race condition in the xdg.BaseDirectory.getruntimedir function in pyxdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the...

3.3CVSS5.8AI score0.00317EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2022/05/17 1:27 a.m.•38 views

pyxdg Arbitrary File Overwrite via Race Condition

Race condition in the xdg.BaseDirectory.getruntimedir function in pyxdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the...

3.3CVSS6.6AI score0.00317EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2015/01/05 12:00 a.m.•27 views

Fedora 20 : pyxdg-0.25-5.fc20 (2014-16357)

Fix CVE-2014-1624 pyxdg: TOCTOU race condition in getruntimedir when strict=False Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

3.3CVSS5.3AI score0.00317EPSS
SaveExploits0References3
Mend
Mend
•added 2014/01/28 12:00 a.m.•7 views

CVE-2014-1624

Race condition in the xdg.BaseDirectory.getruntimedir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once th...

4CVSS0.00317EPSS
SaveExploits0References11
Rows per page
Query Builder