Python · Pip · CVE-2014-8991
**Name of the Vulnerable Software and Affected Versions**
pip versions 1.3 through 1.5.6
**Description**
The issue allows local users to cause a denial of service, specifically preventing package installation, by creating a `/tmp/pip-build-*` file for another user.
**Recommendations**
For pip versions 1.3 through 1.5.6, consider restricting access to the `/tmp/pip-build-*` file to prevent unauthorized users from creating these files and causing a denial of service.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.