Unrated

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tm...

CVE-2019-12779 First seen on SecPulse Jun 8, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-12779 libqb Fixed in: 1.0.4-1

Original description The description as published by the source.

libqb before 1.0.5 allows local users to overwrite arbitrary files via a symlink attack, because it uses predictable filenames (under /dev/shm and /tmp) without O_EXCL.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory securityfocus.com
advisory access.redhat.com
advisory github.com
advisory github.com
advisory security.gentoo.org
patch bugzilla.redhat.com
patch github.com
web lists.opensuse.org
web lists.opensuse.org
web lists.opensuse.org

Key facts

Severity: Unrated
Published: Jun 8, 2019
First seen on SecPulse: Jun 8, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50