CVE-2013-0296

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2013-0296

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2013-0296.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2013-0296

Related

Published

2014-04-27T21:55:05Z

Modified

2024-11-21T01:47:15Z

Summary

[none]

Details

Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while compression is occurring.

References

Affected packages

Debian:11 / pigz

Package

Name: pigz
Purl: pkg:deb/debian/pigz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.4-2

Ecosystem specific

{
    "urgency": "low"
}

Debian:12 / pigz

Package

Name: pigz
Purl: pkg:deb/debian/pigz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.4-2

Ecosystem specific

{
    "urgency": "low"
}

Debian:13 / pigz

Package

Name: pigz
Purl: pkg:deb/debian/pigz?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.4-2

Ecosystem specific

{
    "urgency": "low"
}