CVE-2015-5224

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-377

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2015/08/24/3Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/76467Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1256686Issue Tracking, Patch, Third Party Advisory
https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/08/24/3Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/76467Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1256686Issue Tracking, Patch, Third Party Advisory
https://github.com/karelzak/util-linux/commit/bde91c85bdc77975155058276f99d2e0f5eab5a9Patch, Third Party Advisory

Timeline

Published: Aug 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-52257.2Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a de CVE-2015-52278.8The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter.CVE-2015-52287.8The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of e CVE-2015-52297.5The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize memory areas, which mig CVE-2015-52307.5The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a den CVE-2015-52315.5The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obtain sensitive informa CVE-2015-52328.1Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.CVE-2015-52334.2Foreman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which allows (1) remote authenticated users with t CVE-2015-52346.8IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into CVE-2015-52354.3IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to CVE-2015-52367.5It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origi CVE-2015-52378.8protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.