REDHAT-BUG-1077023: Low severity centos readline vulnerability

Published Mar 17, 2014

Updated

Steve Kemp discovered the rltropen() function in readline, a set of libraries to handle command lines, insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks. As noted in the CVE request, rltropen() is typically only called during debugging.

CVE request: http://seclists.org/oss-sec/2014/q1/579

Affected Software

1 affected component

GNU readline

Event History

Mar 17, 2014

Data Sourced

via Red Hat·03:06 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1077023?

The severity of REDHAT-BUG-1077023 is considered high due to the potential for local attackers to exploit symbolic link vulnerabilities.

How do I fix REDHAT-BUG-1077023?

To fix REDHAT-BUG-1077023, you should update your GNU Readline library to the latest version that addresses this vulnerability.

What are the potential impacts of REDHAT-BUG-1077023?

The potential impacts of REDHAT-BUG-1077023 include unauthorized access and manipulation of files by local attackers due to insecure temporary file handling.

Who is affected by REDHAT-BUG-1077023?

Users of GNU Readline, particularly in environments where debugging features are enabled, are affected by REDHAT-BUG-1077023.

When was REDHAT-BUG-1077023 discovered?

REDHAT-BUG-1077023 was discovered by Steve Kemp, indicating it was identified around early 2014.