Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8991HistoryNov 24, 2014 - 3:59 p.m.
CVE-2014-8991
2014-11-2415:59:15
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.001
Percentile
31.0%
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-pip | < 1.5.6-4 | python-pip_1.5.6-4_all.deb |
| Debian | 11 | all | python-pip | < 1.5.6-4 | python-pip_1.5.6-4_all.deb |
| Debian | 999 | all | python-pip | < 1.5.6-4 | python-pip_1.5.6-4_all.deb |
| Debian | 13 | all | python-pip | < 1.5.6-4 | python-pip_1.5.6-4_all.deb |
Related
mageia
mageia
Updated python-pip packages fix CVE-2014-8991
2015-01-15 00:55:47
osv
osv
pip lack of randomness in build directory
2022-05-13 01:11:25
PYSEC-2014-11
2014-11-24 15:59:00
ubuntucve
ubuntucve
CVE-2014-8991
2014-11-24 00:00:00
cvelist
cvelist
CVE-2014-8991
2014-11-24 15:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0023)
2022-01-28 00:00:00
nvd
nvd
CVE-2014-8991
2014-11-24 15:59:15
cve
cve
CVE-2014-8991
2014-11-24 15:59:15
prion
prion
Code injection
2014-11-24 15:59:00
github
github
pip lack of randomness in build directory
2022-05-13 01:11:25
ibm
ibm
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.001
Percentile
31.0%
Related for DEBIANCVE:CVE-2014-8991