CVE-2014-2906

7

HIGHCVSS v3

Published

January 28, 2020

CVSS v2

4.4 MEDIUM

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.

fish-shell/fish-shell

GitHubThe user-friendly command line shell.

NVD

fish

RubyGemsA gem for printing ascii fish

>= 1.16.0, < 2.1.1NVD

fish

NPM

More on this CVE

NVD↗GitHub Advisory↗

jQuery of filesystem for Node.js

>= 1.16.0, < 2.1.1NVD

fish

Python Package IndexAnimating fish (and birds) for progress bars

>= 1.16.0, < 2.1.1NVD

Security Advisories

CVE-2014-2906

Description

More on this CVE