Improper Control of Generation of Code in HawtJNI

2022-05-1704:17:07

Google

osv.dev

0.0004 Low

EPSS

Percentile

10.1%

JSON

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

CPENameOperatorVersion
org.fusesource.hawtjni:hawtjni-runtimeeq1.2
org.fusesource.hawtjni:hawtjni-runtimeeq1.7
org.fusesource.hawtjni:hawtjni-runtimeeq1.6
org.fusesource.hawtjni:hawtjni-runtimeeq1.3
org.fusesource.hawtjni:hawtjni-runtimeeq1.1
org.fusesource.hawtjni:hawtjni-runtimeeq1.0
org.fusesource.hawtjni:hawtjni-runtimeeq1.4
org.fusesource.hawtjni:hawtjni-runtimeeq1.5

Name	Operator	Version
org.fusesource.hawtjni:hawtjni-runtime	eq	1.2
org.fusesource.hawtjni:hawtjni-runtime	eq	1.7
org.fusesource.hawtjni:hawtjni-runtime	eq	1.6
org.fusesource.hawtjni:hawtjni-runtime	eq	1.3
org.fusesource.hawtjni:hawtjni-runtime	eq	1.1
org.fusesource.hawtjni:hawtjni-runtime	eq	1.0
org.fusesource.hawtjni:hawtjni-runtime	eq	1.4
org.fusesource.hawtjni:hawtjni-runtime	eq	1.5