Vulnerability in Oracle Solaris
CVE-2014-8991
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.
Affected products
- Oracle Solaris — versions 11.2
- Pypa Pip
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)