Unrated

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overw...

CVE-2024-55566 First seen on SecPulse Dec 9, 2024

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-55566 colpack
Ubuntu UBUNTU-CVE-2024-55566 colpack

Original description The description as published by the source.

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report bugzilla.suse.com
web cwe.mitre.org
web github.com

Key facts

Severity: Unrated
Published: Dec 9, 2024
First seen on SecPulse: Dec 9, 2024
CWE: CWE-335

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04