Skip to content
OpenAdvisories
Low CVE-2014-1624 EUVD-2014-0096GHSA-7372-q459-jxhrPYSEC-2014-95

pyxdg Arbitrary File Overwrite via Race Condition

Published Jan 28, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Package: pyxdg Package: pyxdg Package: pyxdg Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu

Description

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pyxdg 0.25-4 —
Debian 13 pyxdg 0.25-4 —
Debian 12 pyxdg 0.25-4 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS pyxdg 0.25-4 —
Ubuntu 14.04 LTS pyxdg 0.25-4 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP5 python-xdg 0.25-9.3.1 SUSE-SU-2019:2719-2
SLES 12 SP4 python-xdg 0.25-9.3.1 SUSE-SU-2019:2719-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP5 python-xdg 0.25-9.3.1 SUSE-SU-2019:2719-2
SLES for SAP 12 SP4 python-xdg 0.25-9.3.1 SUSE-SU-2019:2719-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI pyxdg < 0.26 0.26 GHSA-7372-q459-jxhr
PyPI pyxdg >= 0.25, < 0.26 0.26 PYSEC-2014-95

Advisories 2

References