Medium severity6.7NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026
CVE-2024-5742
CVE-2024-5742
Description
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
13cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- osv-coords6 versionspkg:rpm/almalinux/nanopkg:rpm/opensuse/nano&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/nano&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/nano&distro=openSUSE%20Tumbleweedpkg:rpm/suse/nano&distro=SUSE%20Package%20Hub%2015%20SP5pkg:rpm/suse/nano&distro=SUSE%20Package%20Hub%2015%20SP6
< 2.9.8-3.el8_10+ 5 more
- (no CPE)range: < 2.9.8-3.el8_10
- (no CPE)range: < 7.2-bp156.3.3.1
- (no CPE)range: < 7.2-bp156.3.3.1
- (no CPE)range: < 8.0-2.1
- (no CPE)range: < 7.2-bp156.3.3.1
- (no CPE)range: < 7.2-bp156.3.3.1
Patches
Vulnerability mechanics
References
5- access.redhat.com/security/cve/CVE-2024-5742nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2024:6986nvd
- access.redhat.com/errata/RHSA-2024:9430nvd
- lists.debian.org/debian-lts-announce/2024/06/msg00006.htmlnvd
News mentions
0No linked articles in our index yet.