CVE-2014-1838: Medium severity openSUSE openSUSE vulnerability
The (1) extractkeysfrompdf and (2) fillpdf functions in pdfext.py in logilab-common before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
Other sources
The (1) extractkeysfrompdf and (2) fillpdf functions in pdfext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/logilab-commonto a version that resolves this vulnerability.Fixed in 0.61.0 - Upgrade
Upgrade
debian/logilab-commonto a version that resolves this vulnerability.Fixed in 1.8.1-1Fixed in 1.9.8-1Fixed in 2.1.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1838?
CVE-2014-1838 has a medium severity due to the potential for local users to exploit the symlink vulnerability and overwrite arbitrary files.
How do I fix CVE-2014-1838?
To remediate CVE-2014-1838, update logilab-common to version 0.61.0 or later if using pip, or to specific versions for Debian as mentioned in the advisory.
Which versions of logilab-common are affected by CVE-2014-1838?
All versions of logilab-common prior to 0.61.0 and up to 0.60.0 are vulnerable to CVE-2014-1838.
Can CVE-2014-1838 be exploited remotely?
No, CVE-2014-1838 is a local vulnerability that requires local user access to exploit.
What impact does CVE-2014-1838 have on my system?
CVE-2014-1838 can allow local users to overwrite arbitrary files, potentially leading to unauthorized access or data loss.