p PatchFirst

CVE-2014-0012

CVE-2014-0012

This page contains facts from public vulnerability sources. Check the original advisory before updating.

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

CVSS 6.9 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • jinja2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.7.2-2

    Update to 2.7.2-2

  • jinja2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.7.2-2

    Update to 2.7.2-2

  • jinja2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.7.2-2

    Update to 2.7.2-2

  • jinja2 PyPI

    Versions
    • 2.0
    • 2.0rc1
    • 2.1
    • 2.1.1
    • 2.2
    • 2.2.1
    • 2.3
    • 2.3.1
    • 2.4
    • 2.4.1
    • 2.5
    • 2.5.1
    • 2.5.2
    • 2.5.3
    • 2.5.4
    • 2.5.5
    • 2.6
    • 2.7
    • 2.7.1
    Affected ranges
    • ECOSYSTEM: < 2.7.2

    Update to 2.7.2

  • jinja2 PyPI

    Versions
    • 2.0
    • 2.0rc1
    • 2.1
    • 2.1.1
    • 2.2
    • 2.2.1
    • 2.3
    • 2.3.1
    • 2.4
    • 2.4.1
    • 2.5
    • 2.5.1
    • 2.5.2
    • 2.5.3
    • 2.5.4
    • 2.5.5
    • 2.6
    • 2.7
    • 2.7.1
    • 2.7.2
    Affected ranges
    • GIT: < acb672b6a179567632e032f547582f30fa2f4aa7
    • ECOSYSTEM: < 2.7.3

    Update to 2.7.3

Original sources

Check your server →