CVE-2014-2667 Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file perm...
LowCVSS 3.3
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the expected value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| python | = 3.2.0 | No fix listed |
| python | = 3.2.1 | No fix listed |
| python | = 3.2.2 | No fix listed |
| python | = 3.2.3 | No fix listed |
| python | = 3.2.4 | No fix listed |
| python | = 3.2.5 | No fix listed |
| python | = 3.2.6 | No fix listed |
| python | = 3.3.0 | No fix listed |
| python | = 3.3.1 | No fix listed |
| python | = 3.3.2 | No fix listed |
| python | = 3.3.3 | No fix listed |
| python | = 3.3.4 | No fix listed |
| python | = 3.3.5 | No fix listed |
| python | = 3.3.6 | No fix listed |
| python | = 3.4.0 | No fix listed |
| python | = 3.4.1 | No fix listed |
| python | = 3.4.2 | No fix listed |
References
- bugs.python.org vendor-advisory
- openSUSE-SU-2020:0086 vendor-advisory
- openSUSE-SU-2014:0596 vendor-advisory
- openSUSE-SU-2014:0597 vendor-advisory
- [oss-security] 20140328 CVE request: os.makedirs(exist_ok=True) is not thread-safe in Python mailing-list
- [oss-security] 20140329 Re: [PSRT] CVE request: os.makedirs(exist_ok=True) is not thread-safe in Python mailing-list
- [oss-security] 20140330 Re: CVE request: os.makedirs(exist_ok=True) is not thread-safe in Python mailing-list
- GLSA-201503-10 vendor-advisory