VYPR
← All advisories
Moderate severityNVD Advisory· Published Aug 28, 2013· Updated Jun 16, 2026

CVE-2013-2035

CVE-2013-2035

Description

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.fusesource.hawtjni:hawtjni-runtimeMaven
< 1.81.8

Affected products

9
  • Red Hat/Hawtjni8 versions
    cpe:2.3:a:redhat:hawtjni:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:redhat:hawtjni:*:*:*:*:*:*:*:*range: <=1.7
    • cpe:2.3:a:redhat:hawtjni:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:hawtjni:1.6:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.fusesource.hawtjni/hawtjni-runtime
    Range: < 1.8

Patches

Vulnerability mechanics

References

20

News mentions

0

No linked articles in our index yet.