CVE-2014-2893

Published: 4/23/2014 Last updated: 8/6/2024 Reserved: 4/17/2014

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (14)

bap-llvm bap-std brotli conf-bap-llvm conf-clang conf-clang-format conf-libclang conf-lld conf-llvm conf-llvm-shared conf-llvm-static mopsa owi z3

Products affected (1)

Product	Vendor	Version
n/a	n/a	< 56f96cf6eb11a1c2d594367c3becbfb06a855ec1

References (8)

http://www.openwall.com/lists/oss-security/2014/04/16/2
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817
http://lists.opensuse.org/opensuse-updates/2015-02/msg00038.html
http://www.openwall.com/lists/oss-security/2014/04/20/1
http://www.openwall.com/lists/oss-security/2014/04/16/2
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817
http://lists.opensuse.org/opensuse-updates/2015-02/msg00038.html
http://www.openwall.com/lists/oss-security/2014/04/20/1