CVE-2015-5701 : mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows

mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700.

Published 2017-08-25 18:29:01

Updated 2017-09-12 15:37:35

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2015-5701

TUG » Texlive » Version: 20140525
cpe:2.3:a:tug:texlive:20140525:*:*:*:*:*:*:*
Matching versions
TUG » Texlive » Version: 20130530
cpe:2.3:a:tug:texlive:20130530:*:*:*:*:*:*:*
Matching versions
TUG » Texlive » Version: 20120701
cpe:2.3:a:tug:texlive:20120701:*:*:*:*:*:*:*
Matching versions
TUG » Texlive » Version: 20100722
cpe:2.3:a:tug:texlive:20100722:*:*:*:*:*:*:*
Matching versions
TUG » Texlive » Version: 20110705
cpe:2.3:a:tug:texlive:20110705:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2015-5701

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-5701

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:C/A:N	3.9	7.8	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Complete Availability Impact: None
6.1	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N	1.8	4.2	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: High Availability: None

CWE ids for CVE-2015-5701

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-5701

https://bugzilla.redhat.com/show_bug.cgi?id=1181167

1181167 – (CVE-2015-5700, CVE-2015-5701) CVE-2015-5700 CVE-2015-5701 texlive: insecure use of /tmp in mktexlsr
Issue Tracking;Patch;Third Party Advisory

CVEs referencing this url
http://www.openwall.com/lists/oss-security/2015/07/30/6

oss-security - Re: CVE request: mktexlsr/texlive: insecure use of /tmp
Mailing List;Third Party Advisory

CVEs referencing this url
https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?r1=19613&r2=22885

[texlive] Diff of /trunk/Build/source/texk/kpathsea/mktexlsr
Patch;Vendor Advisory

CVEs referencing this url
https://www.tug.org/svn/texlive/trunk/Build/source/texk/kpathsea/mktexlsr?view=log

[texlive] Log of /trunk/Build/source/texk/kpathsea/mktexlsr
Vendor Advisory

CVEs referencing this url
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139

#775139 - mktexlsr: insecure use of /tmp - Debian Bug report logs
Issue Tracking;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2015-5701

Products affected by CVE-2015-5701

Exploit prediction scoring system (EPSS) score for CVE-2015-5701

CVSS scores for CVE-2015-5701

CWE ids for CVE-2015-5701

References for CVE-2015-5701