CVE-2014-2524: Low severity mageia vulnerability
Steve Kemp discovered the rltropen() function in readline, a set of libraries to handle command lines, insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks. As noted in the CVE request, rltropen() is typically only called during debugging.
CVE request: http://seclists.org/oss-sec/2014/q1/579
Other sources
The rltropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2524?
CVE-2014-2524 is considered to have a medium severity due to its potential for local symbolic link attacks.
How do I fix CVE-2014-2524?
To mitigate CVE-2014-2524, users should update their versions of readline to a patched release that addresses the vulnerability.
Who discovered CVE-2014-2524?
CVE-2014-2524 was discovered by Steve Kemp.
Which software versions are affected by CVE-2014-2524?
CVE-2014-2524 affects several readline versions up to 6.3 and specific Mageia and openSUSE releases.
What type of attack does CVE-2014-2524 allow?
CVE-2014-2524 allows local attackers to perform symbolic link attacks due to insecure temporary file handling.