CVE-2015-7758: Low severity suse linux vulnerability
Published Jul 29, 2014
·Updated
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a (1) .aux, (2) .log, (3) .out, (4) .pdf, or (5) .toc extension for the file name, as demonstrated by .thesis.tex.aux.
Affected Software
5 affected componentsFixes available
debian/gummi
0.8.1-10.8.3+really0.8.1-0.10.8.3+really0.8.3-3
openSUSE Leap=42.1
openSUSE openSUSE=13.1
openSUSE openSUSE=13.2
Gummi Project Gummi=0.6.5
Event History
Jul 29, 2014
Data Sourced
via Debian·07:45 PM
SeverityAffected Software
Jan 8, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Aug 6, 2024
Data Sourced
via Debian·08:08 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7758?
CVE-2015-7758 has been classified with a moderate severity level due to its exploitation potential via local users.
2
How do I fix CVE-2015-7758?
To mitigate CVE-2015-7758, upgrade Gummi to version 0.8.1-1 or later.
3
Which versions of Gummi are affected by CVE-2015-7758?
Gummi version 0.6.5 is specifically affected by CVE-2015-7758.
4
Can CVE-2015-7758 be exploited remotely?
CVE-2015-7758 is not remotely exploitable as it requires local user access.
5
What operating systems are impacted by CVE-2015-7758?
CVE-2015-7758 affects users on various Debian and openSUSE systems running Gummi version 0.6.5.