Skip to content
OpenAdvisories
Unscored RHSA-2015:1320 2 CVEs

Red Hat Security Advisory: ppc64-diag security, bug fix and enhancement update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server ppc64-diag 0:2.6.7-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server ppc64-diag-debuginfo 0:2.6.7-4.el6

Vulnerabilities 2

  • Unscored —
    CVE-2014-4038

    ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_sup…

    ppc64-diag Debian
  • Unscored —
    CVE-2014-4039

    ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsn…

    ppc64-diag Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1109371
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1131501
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1320.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-4038
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4038
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4038
  • report
    https://access.redhat.com/security/cve/CVE-2014-4039
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4039
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4039