CVE-2015-5224

Published: 8/23/2017 Last updated: 8/6/2024 Reserved: 7/1/2015

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

vhdlib

Products affected (1)

Product	Vendor	Version
n/a	n/a	< 9be8aac91960ea32fd0e874758c9afee665c57d2

References (8)

https://bugzilla.redhat.com/show_bug.cgi?id=1256686
http://www.securityfocus.com/bid/76467
http://www.openwall.com/lists/oss-security/2015/08/24/3
https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9
https://bugzilla.redhat.com/show_bug.cgi?id=1256686
http://www.securityfocus.com/bid/76467
http://www.openwall.com/lists/oss-security/2015/08/24/3
https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9