CVE-2013-4159 in OpenSUSE

Riassunto

di MITRE

ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 12/06/2013
• Divulgazione: 06/08/2014
• Moderazione: accettato
• Voce: VDB-70537
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.02371
• KEV: no
• Attività: molto basso
• Settore: Energy, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-4159
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-4159
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-4159/