CVE-2014-8991
Fixed in a distro release EPSS <1%
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
Products: pypa pip, oracle solaris
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | pip | 6.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | python-pip | 1.5.6-4 |
| Debian 13 | python-pip | 1.5.6-4 |
| Debian 14 | python-pip | 1.5.6-4 |
| SUSE Linux Enterprise Desktop 12 SP4 | python-ply | 3.4-3.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python39-pip | 20.2.4-7.5.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP3 | python39-setuptools | 44.1.1-7.3.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-jmespath | 0.9.2-10.6.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-jsonschema | 2.2.0-3.3.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-paramiko | 1.18.5-2.15.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-pip | 10.0.1-11.6.1 |
| SUSE Linux Enterprise Module for Public Cloud 12 | python-ply | 3.4-3.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | python-ply | 3.4-3.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | python-ply | 3.4-3.3.1 |
| SUSE OpenStack Cloud 7 | python-pip | 10.0.1-11.6.1 |
| SUSE OpenStack Cloud 7 | python-ply | 3.4-3.3.1 |
| Ubuntu Pro 14.04 LTS | python-pip | no fix |
| openSUSE Tumbleweed | python-pip | 9.0.1-1.1 |
| openSUSE Tumbleweed | python2-pip | 20.0.2-2.6 |