CVE-2014-3422 lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
LowCVSS 3.3
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU emacs | <= 24.3 | No fix listed |
| GNU emacs | = 20.0 | No fix listed |
| GNU emacs | = 20.1 | No fix listed |
| GNU emacs | = 20.2 | No fix listed |
| GNU emacs | = 20.3 | No fix listed |
| GNU emacs | = 20.4 | No fix listed |
| GNU emacs | = 20.5 | No fix listed |
| GNU emacs | = 20.6 | No fix listed |
| GNU emacs | = 20.7 | No fix listed |
| GNU emacs | = 21 | No fix listed |
| GNU emacs | = 21.1 | No fix listed |
| GNU emacs | = 21.2 | No fix listed |
| GNU emacs | = 21.2.1 | No fix listed |
| GNU emacs | = 21.3 | No fix listed |
| GNU emacs | = 21.3.1 | No fix listed |
| GNU emacs | = 21.4 | No fix listed |
| GNU emacs | = 22.1 | No fix listed |
| GNU emacs | = 22.2 | No fix listed |
| GNU emacs | = 22.3 | No fix listed |
| GNU emacs | = 23.1 | No fix listed |
| GNU emacs | = 23.2 | No fix listed |
| GNU emacs | = 23.3 | No fix listed |
| GNU emacs | = 23.4 | No fix listed |
| GNU emacs | = 24.1 | No fix listed |
| GNU emacs | = 24.2 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mageia project mageia | = 3 | No fix listed |
| mageia project mageia | = 4 | No fix listed |
References
- advisories.mageia.org
- debbugs.gnu.org
- [emacs-diffs] 20140506 emacs-24 r117067: find-gc.el misc fixes mailing-list
- [oss-security] 20140507 Re: CVE Request - Predictable temporary filenames in GNU Emacs mailing-list
- MDVSA-2015:117 vendor-advisory
- Debian Security Tracker CVE-2014-3422 vendor-advisory