Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to
    overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-
    owned location, then replacing it with a symlink to an attacker-controlled location once the
    get_runtime_dir function is called. (CVE-2014-1624)

Fix CVE-2014-1624 pyxdg: TOCTOU race condition in get_runtime_dir() when strict=False

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
431827	SCA: security update for pyxdg (GHSA-7372-q459-jxhr)	Tenable Cloud Security	SCA Checks	medium
431827	SCA: security update for pyxdg (GHSA-7372-q459-jxhr)	Tenable Self-Hosted Container Security	SCA Checks	medium
80336	Fedora 20 : pyxdg-0.25-5.fc20 (2014-16357)	Nessus	Fedora Local Security Checks	low
80232	Fedora 19 : pyxdg-0.25-5.fc19 (2014-16466)	Nessus	Fedora Local Security Checks	low
80132	Fedora 21 : pyxdg-0.25-5.fc21 (2014-16287)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2014-1624

medium

Tenable Plugins

medium

medium

low

low

low