CVE-2023-2976: Use of temporary directory for file creation in `FileBackedOutputStream` in Guava
First published: Wed Jun 14 2023(Updated: )
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class. Even though the security vulnerability is fixed in version 32.0.0, maintainers recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
Credit: cve-coordination@google.com cve-coordination@google.com cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Guava | <32.0.0 | |
| maven/com.google.guava:guava | >=1.0<32.0.0-android | 32.0.0-android |
| redhat/guava | <32.0.0 | 32.0.0 |
| IBM Data Virtualization on Cloud Pak for Data | <=3.0 | |
| IBM Watson Query with Cloud Pak for Data as a Service | <=2.2 | |
| IBM Watson Query with Cloud Pak for Data as a Service | <=2.1 | |
| IBM Watson Query with Cloud Pak for Data as a Service | <=2.0 | |
| IBM Data Virtualization on Cloud Pak for Data | <=1.8 | |
| IBM Data Virtualization on Cloud Pak for Data | <=1.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/google/guava/issues/2575
- https://security.netapp.com/advisory/ntap-20230818-0008/
- https://nvd.nist.gov/vuln/detail/CVE-2023-2976
- https://github.com/google/guava/issues/6532
- https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
- https://github.com/google/guava/releases/tag/v32.0.0
- https://security.netapp.com/advisory/ntap-20230818-0008
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
- https://github.com/advisories/GHSA-7g45-4rm6-3mm3 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2232209
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2232210
- https://access.redhat.com/errata/RHSA-2023:5165
- https://catalog.redhat.com/software/containers/ubi8/openjdk-17/618bdbf34ae3739687568813?tag=1.16-2&push_date=1690216094000
- https://access.redhat.com/errata/RHSA-2023:5491
- https://access.redhat.com/errata/RHSA-2023:7639
- https://access.redhat.com/errata/RHSA-2023:7637
- https://access.redhat.com/errata/RHSA-2023:7638
- https://access.redhat.com/errata/RHSA-2023:7641
- https://access.redhat.com/errata/RHSA-2023:7678
- https://access.redhat.com/errata/RHSA-2023:7700
- https://access.redhat.com/errata/RHSA-2024:0777
- https://access.redhat.com/errata/RHSA-2024:0778
- https://access.redhat.com/errata/RHSA-2024:0799
- https://access.redhat.com/errata/RHSA-2024:0800
- https://access.redhat.com/errata/RHSA-2024:0798
- https://access.redhat.com/errata/RHSA-2024:0801
- https://access.redhat.com/errata/RHSA-2024:0804
- https://access.redhat.com/errata/RHSA-2024:1027
- https://access.redhat.com/errata/RHSA-2024:2707
- https://access.redhat.com/errata/RHSA-2024:3527
- https://bugzilla.redhat.com/show_bug.cgi?id=2215229
- https://www.ibm.com/support/pages/node/7183851 (Advisory)
Frequently Asked Questions
What is CVE-2023-2976?
CVE-2023-2976 is a vulnerability that allows other users and apps on Unix systems and Android Ice Cream Sandwich to access files created in Java's default temporary directory in FileBackedOutputStream in Google Guava versions 1.0 to 31.1.
What is the severity of CVE-2023-2976?
The severity of CVE-2023-2976 is high with a severity value of 7.1.
How does CVE-2023-2976 affect affected software?
CVE-2023-2976 affects Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich.
How can I fix CVE-2023-2976?
To fix CVE-2023-2976, it is recommended to upgrade to Google Guava version 32.0.0 or higher.
What are the references for CVE-2023-2976?
The references for CVE-2023-2976 are: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-2976), [GitHub Issue 2575](https://github.com/google/guava/issues/2575), [GitHub Issue 6532](https://github.com/google/guava/issues/6532).
- collector/nvd-index
- agent/type
- agent/weakness
- agent/author
- agent/remedy
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-7g45-4rm6-3mm3
- alias/CVE-2023-2976
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- agent/title
- agent/first-publish-date
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- agent/trending
- agent/source
- collector/nvd-api
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google guava
- package-manager/maven
- package-manager/redhat
- vendor/ibm
- canonical/ibm data virtualization on cloud pak for data
- version/ibm data virtualization on cloud pak for data/3.0
- canonical/ibm watson query with cloud pak for data as a service
- version/ibm watson query with cloud pak for data as a service/2.2
- version/ibm watson query with cloud pak for data as a service/2.1
- version/ibm watson query with cloud pak for data as a service/2.0
- version/ibm data virtualization on cloud pak for data/1.8
- version/ibm data virtualization on cloud pak for data/1.7