Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dstufft

#46947of 53,622
5.4Total CVSS
Vulnerabilities · 1
PT-2014-8771
5.4
2014-11-24
Python · Pip · CVE-2014-8991
**Name of the Vulnerable Software and Affected Versions** pip versions 1.3 through 1.5.6 **Description** The issue allows local users to cause a denial of service, specifically preventing package installation, by creating a `/tmp/pip-build-*` file for another user. **Recommendations** For pip versions 1.3 through 1.5.6, consider restricting access to the `/tmp/pip-build-*` file to prevent unauthorized users from creating these files and causing a denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.