Lucene search

PRIOn knowledge basePRION:CVE-2013-2035

HistoryAug 28, 2013 - 11:55 p.m.

Race condition

2013-08-2823:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.1%

JSON

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

CPENameOperatorVersion
hawtjnieq1.2
hawtjnieq1.6
hawtjnieq1.1
hawtjnieq1.4
hawtjnieq1.0
hawtjnieq1.5
hawtjnieq1.3
hawtjnile1.7

Name	Operator	Version
hawtjni	eq	1.2
hawtjni	eq	1.6
hawtjni	eq	1.1
hawtjni	eq	1.4
hawtjni	eq	1.0
hawtjni	eq	1.5
hawtjni	eq	1.3
hawtjni	le	1.7

References

rhn.redhat.com/errata/RHSA-2013-1029.html

rhn.redhat.com/errata/RHSA-2013-1784.html

rhn.redhat.com/errata/RHSA-2013-1785.html

rhn.redhat.com/errata/RHSA-2013-1786.html

rhn.redhat.com/errata/RHSA-2014-0029.html

rhn.redhat.com/errata/RHSA-2014-0245.html

rhn.redhat.com/errata/RHSA-2014-0254.html

rhn.redhat.com/errata/RHSA-2014-0400.html

rhn.redhat.com/errata/RHSA-2015-0034.html

secunia.com/advisories/53415

secunia.com/advisories/54108

secunia.com/advisories/57915

www.osvdb.org/93411

www.securitytracker.com/id/1029431

bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2035

github.com/fusesource/hawtjni/commit/92c266170ce98edc200c656bd034a237098b8aa5

github.com/jline/jline2/issues/85

github.com/jruby/jruby/issues/732