antirez/linenoise
GitHub
Releases2
Frequency10 years 8 months
Last Release
Stars4.3K
A small self-contained alternative to readline and libedit
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 6.8 MEDIUM | — | ||
TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path. | |||
| — | 2.1 LOW | ||
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file. | |||