CVE-2014-1839: Medium severity openSUSE openSUSE vulnerability
The Execute class in shellutils in logilab-common before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
Other sources
The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/logilab-commonto a version that resolves this vulnerability.Fixed in 0.61.0 - Upgrade
Upgrade
debian/logilab-commonto a version that resolves this vulnerability.Fixed in 1.8.1-1Fixed in 1.9.8-1Fixed in 2.1.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1839?
CVE-2014-1839 is considered a local privilege escalation vulnerability.
How do I fix CVE-2014-1839?
To fix CVE-2014-1839, update logilab-common to version 0.61.0 or later.
What versions of logilab-common are affected by CVE-2014-1839?
CVE-2014-1839 affects logilab-common versions prior to 0.61.0.
Is CVE-2014-1839 applicable to Debian systems?
Yes, CVE-2014-1839 impacts logilab-common on Debian systems prior to version 0.61.0.
Can CVE-2014-1839 be exploited by remote attackers?
No, CVE-2014-1839 can only be exploited by local users with access to the system.