Unrated severityNVD Advisory· Published Jan 28, 2020· Updated Aug 6, 2024
CVE-2014-3856
CVE-2014-3856
Description
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- fish/fish-shelldescription
- osv-coords3 versionspkg:rpm/opensuse/fish3&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/fish3&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/fish&distro=openSUSE%20Tumbleweed
< 3.0.0-lp150.3.1+ 2 more
- (no CPE)range: < 3.0.0-lp150.3.1
- (no CPE)range: < 3.0.0-lp151.2.1
- (no CPE)range: < 2.4.0-1.1
Patches
Vulnerability mechanics
References
3- github.com/fish-shell/fish-shell/issues/1437mitrex_refsource_MISC
- github.com/fish-shell/fish-shell/releases/tag/2.1.1mitrex_refsource_CONFIRM
- www.openwall.com/lists/oss-security/2014/04/28/4mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.