CVE-2014-3424

Fixed in a distro release EPSS <1%

lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.

Published 2014-05-08 · CVE record · OSV

Products: mageia_project mageia, gnu emacs

Distro releases