CVE-2014-3421: Low severity Mageia Project Mageia vulnerability
Published May 8, 2014
·Updated
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
Affected Software
27 affected components
Mageia Project Mageia=3
Mageia Project Mageia=4
GNU Emacs<=24.3
GNU Emacs=20.0
GNU Emacs=20.1
GNU Emacs=20.2
GNU Emacs=20.3
GNU Emacs=20.4
GNU Emacs=20.5
GNU Emacs=20.6
GNU Emacs=20.7
GNU Emacs=21
GNU Emacs=21.1
GNU Emacs=21.2
GNU Emacs=21.2.1
GNU Emacs=21.3
GNU Emacs=21.3.1
GNU Emacs=21.4
GNU Emacs=22.1
GNU Emacs=22.2
GNU Emacs=22.3
GNU Emacs=23.1
GNU Emacs=23.2
GNU Emacs=23.3
GNU Emacs=23.4
GNU Emacs=24.1
GNU Emacs=24.2
Event History
May 8, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3421?
The severity of CVE-2014-3421 is considered moderate due to its potential for local users to overwrite arbitrary files.
2
How do I fix CVE-2014-3421?
To fix CVE-2014-3421, update GNU Emacs to a version later than 24.3 or apply a patch that addresses the symlink vulnerability.
3
Which versions of GNU Emacs are affected by CVE-2014-3421?
CVE-2014-3421 affects GNU Emacs versions up to and including 24.3.
4
Can CVE-2014-3421 impact Mageia systems?
Yes, CVE-2014-3421 can impact Mageia systems running vulnerable versions of GNU Emacs.
5
What attack vector does CVE-2014-3421 utilize?
CVE-2014-3421 utilizes a symlink attack on the /tmp/gnus.face.ppm temporary file to exploit the vulnerability.