Unscored severity · published Aug 6, 2014
CVE-2013-4159
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1)…
–
CVSS
2.4%
EPSS
No
On KEV
Description
ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CT
Ctdb · Ctdb Project
through 2.2; 2.0; 2.1 · source: NVD
MA
Mageia · Mageia
3.0; 4.0 · source: NVD
OP
Opensuse · Opensuse
12.3; 13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4159
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4159
advisories.mageia.org
http://advisories.mageia.org/MGASA-2014-0274.html
Vendor Advisory
http://lists.opensuse.org/opensuse-updates/2014-06/msg00052.html
wiki.samba.org
http://wiki.samba.org/index.php/CTDB2releaseNotes#ctdb_2.5
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2015:177
www.openwall.com
http://www.openwall.com/lists/oss-security/2014/05/29/12
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=986773