Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Dstufft

#46685de 53,624
5.4CVSS total
Vulnerabilidades · 1
PT-2014-8771
5.4
2014-11-24
Python · Pip · CVE-2014-8991
**Name of the Vulnerable Software and Affected Versions** pip versions 1.3 through 1.5.6 **Description** The issue allows local users to cause a denial of service, specifically preventing package installation, by creating a `/tmp/pip-build-*` file for another user. **Recommendations** For pip versions 1.3 through 1.5.6, consider restricting access to the `/tmp/pip-build-*` file to prevent unauthorized users from creating these files and causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.