CVE-2014-1402 Incorrect Privilege Assignment in Jinja2
MediumCVSS 4.4
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with _jinja2 in /tmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi jinja2(PyPI) | < 2.7.2 | 2.7.2 |
| pypi jinja2(PyPI) | = 2.0 | No fix listed |
| pypi jinja2(PyPI) | = 2.0rc1 | No fix listed |
| pypi jinja2(PyPI) | = 2.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.1.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.2 | No fix listed |
| pypi jinja2(PyPI) | = 2.2.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.3 | No fix listed |
| pypi jinja2(PyPI) | = 2.3.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.4 | No fix listed |
| pypi jinja2(PyPI) | = 2.4.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.5 | No fix listed |
| pypi jinja2(PyPI) | = 2.5.1 | No fix listed |
| pypi jinja2(PyPI) | = 2.5.2 | No fix listed |
| pypi jinja2(PyPI) | = 2.5.3 | No fix listed |
| pypi jinja2(PyPI) | = 2.5.4 | No fix listed |
| pypi jinja2(PyPI) | = 2.5.5 | No fix listed |
| pypi jinja2(PyPI) | = 2.6 | No fix listed |
| pypi jinja2(PyPI) | = 2.7 | No fix listed |
| pypi jinja2(PyPI) | = 2.7.1 | No fix listed |
| debian/jinja2(Debian:12) | < 2.7.2-1 | 2.7.2-1 |
| debian/jinja2(Debian:13) | < 2.7.2-1 | 2.7.2-1 |
| debian/jinja2(Debian:14) | < 2.7.2-1 | 2.7.2-1 |
| pocoo jinja2 | <= 2.7.1 | No fix listed |
| pocoo jinja2 | = 2.0 | No fix listed |
Show 17 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pocoo jinja2 | = 2.0-rc1 | No fix listed |
| pocoo jinja2 | = 2.1 | No fix listed |
| pocoo jinja2 | = 2.1.1 | No fix listed |
| pocoo jinja2 | = 2.2 | No fix listed |
| pocoo jinja2 | = 2.2.1 | No fix listed |
| pocoo jinja2 | = 2.3 | No fix listed |
| pocoo jinja2 | = 2.3.1 | No fix listed |
| pocoo jinja2 | = 2.4 | No fix listed |
| pocoo jinja2 | = 2.4.1 | No fix listed |
| pocoo jinja2 | = 2.5 | No fix listed |
| pocoo jinja2 | = 2.5.1 | No fix listed |
| pocoo jinja2 | = 2.5.2 | No fix listed |
| pocoo jinja2 | = 2.5.3 | No fix listed |
| pocoo jinja2 | = 2.5.4 | No fix listed |
| pocoo jinja2 | = 2.5.5 | No fix listed |
| pocoo jinja2 | = 2.6 | No fix listed |
| pocoo jinja2 | = 2.7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.debian.org
- bugzilla.redhat.com issue-tracking
- github.com vendor-advisory
- github.com
- [El-errata] 20140611 Oracle Linux Security Advisory ELSA-2014-0747 mailing-list
- web.archive.org
- advisories.mageia.org vendor-advisory
- jinja.pocoo.org
- [oss-security] 20140110 CVE Request: python-jinja2: arbitrary code execution vulnerability mailing-list
- [oss-security] 20140110 Re: CVE Request: python-jinja2: arbitrary code execution vulnerability mailing-list
- RHSA-2014:0747 vendor-advisory
- RHSA-2014:0748 vendor-advisory
- GLSA-201408-13 vendor-advisory
- MDVSA-2014:096 vendor-advisory
- 59017 third-party-advisory vendor-advisory
- 58918 third-party-advisory vendor-advisory
- 60770 third-party-advisory vendor-advisory
- 60738 third-party-advisory vendor-advisory
- 56287 third-party-advisory vendor-advisory
- 58783 third-party-advisory vendor-advisory
- Debian Security Tracker CVE-2014-1402 vendor-advisory
- bugs.debian.org issue-tracking