Medium severity4.7NVD Advisory· Published Oct 6, 2017· Updated May 13, 2026

CVE-2015-0296

Description

The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.

Affected products

Tug/Texlive2 versions
cpe:2.3:a:tug:texlive:3.1.20140525_r34255.fc21:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tug:texlive:3.1.20140525_r34255.fc21:*:*:*:*:*:*:*
- cpe:2.3:a:tug:texlive:6.20131226_r32488.fc20:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.fedoraproject.org/pipermail/package-announce/2015-April/154198.htmlnvdThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2015-April/154424.htmlnvdThird Party Advisory
www.openwall.com/lists/oss-security/2015/02/27/6nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/72826nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000