https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:42:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2015-04344 bdu:2015-04344 https://cve.radiocsirt.org/vuln/bdu:2015-04344 https://cve.radiocsirt.org/vuln/euvd-2026-107465 EUVD-2026-107465 https://cve.radiocsirt.org/vuln/euvd-2026-107465 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4419 <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-4419 https://cve.radiocsirt.org/vuln/ghsa-3vxx-8f6w-cpxp <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> https://cve.radiocsirt.org/vuln/ghsa-3vxx-8f6w-cpxp https://cve.radiocsirt.org/vuln/gsd-2013-4419 gsd-2013-4419 https://cve.radiocsirt.org/vuln/gsd-2013-4419 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10032-1 <p>guestfs-data-1.32.4-11.1 on GA media</p> <p>guestfs-data-1.32.4-11.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10032-1 https://cve.radiocsirt.org/vuln/rhsa-2013:1536 <p>libguestfs: insecure temporary directory handling for guestfish&#39;s network socket</p> <p>libguestfs: insecure temporary directory handling for guestfish&#39;s network socket</p> https://cve.radiocsirt.org/vuln/rhsa-2013:1536 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4419 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libguestfs, Ubuntu:18.04:LTS: libguestfs, Ubuntu:20.04:LTS: libguestfs, Ubuntu:22.04:LTS: libguestfs, Ubuntu:24.04:LTS: libguestfs, Ubuntu:25.10: libguestfs, Ubuntu:26.04:LTS: libguestfs</p> <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libguestfs, Ubuntu:18.04:LTS: libguestfs, Ubuntu:20.04:LTS: libguestfs, Ubuntu:22.04:LTS: libguestfs, Ubuntu:24.04:LTS: libguestfs, Ubuntu:25.10: libguestfs, Ubuntu:26.04:LTS: libguestfs</p> <p>The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-4419