VYPR
← All advisories
Moderate severityNVD Advisory· Published Mar 11, 2014· Updated May 6, 2026

CVE-2014-1839

CVE-2014-1839

Description

The Execute class in shellutils in logilab-commons before 0.61.0 uses tempfile.mktemp, which allows local users to have an unspecified impact by pre-creating the temporary file.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
logilab-commonPyPI
< 0.61.00.61.0

Affected products

3
  • Logilab/Logilab Common
    cpe:2.3:a:logilab:logilab-common:*:*:*:*:*:*:*:*
    Range: <=0.60.0
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

8

News mentions

0

No linked articles in our index yet.