MEDIUM
alsa-utils: Insecure temporary file use in /usr/bin/alsa-info(.sh)
Published Nov 9, 2019
5.5
MEDIUMCVSS 3.1
EPSS 0.47%
Description
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.
Affected products
-
- Version 1.0.19 and laterStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Alsa-Driver | Alsa-Driver | n/a |
|
- ≥ 1.0.19 · < 1.0.20
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (8)
- https://access.redhat.com/security/cve/CVE-2009-0035 Vendor Advisory
- https://access.redhat.com/security/cve/cve-2009-0035 x_refsource_MISCExploitPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=484211 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0035 x_refsource_MISCIssue TrackingThird Party Advisory
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0046 Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2009-0035
- https://security-tracker.debian.org/tracker/CVE-2009-0035 x_refsource_MISCThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2009-0035
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2009-0035 | Vendor Advisory | |
| https://access.redhat.com/security/cve/cve-2009-0035 | x_refsource_MISCExploitPatchThird Party Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=484211 | Issue Tracking | |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0035 | x_refsource_MISCIssue TrackingThird Party Advisory | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0046 | Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2009-0035 | ||
| https://security-tracker.debian.org/tracker/CVE-2009-0035 | x_refsource_MISCThird Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2009-0035 |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Nov 9, 2019
Updated Aug 7, 2024
Reserved Dec 15, 2008
Link CVE-2009-0035
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2009-0046 Assigner redhat
Published Nov 9, 2019
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2009-0046