CVE-2014-1858: Input Validation
init.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.
Other sources
Jakub Wilk found that f2py insecurely used a temporary file. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running f2py.
The original report in the Debian bug tracking system (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737778) notes the issue is in numpy/f2py/init.py:
from numpy.distutils.execcommand import execcommand import tempfile if sourcefn is None: fname = os.path.join(tempfile.mktemp()+'.f') else: fname = sourcefn
f = open(fname,'w')
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1858?
CVE-2014-1858 is classified as a medium severity vulnerability due to its potential for local file manipulation.
How do I fix CVE-2014-1858?
To fix CVE-2014-1858, upgrade to NumPy version 1.8.1 or later, which addresses the symlink attack issue.
Which versions of NumPy are affected by CVE-2014-1858?
CVE-2014-1858 affects all versions of NumPy prior to 1.8.1.
What type of attack is exploited in CVE-2014-1858?
CVE-2014-1858 is exploited via a symlink attack that allows local users to write to arbitrary files.
Who discovered the vulnerability CVE-2014-1858?
CVE-2014-1858 was discovered by Jakub Wilk, who found the insecure use of temporary files in f2py.