p PatchFirst

CVE-2014-1402

CVE-2014-1402

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

CVSS 8.6 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • jinja2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.7.2-1

    Update to 2.7.2-1

  • jinja2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.7.2-1

    Update to 2.7.2-1

  • jinja2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.7.2-1

    Update to 2.7.2-1

  • jinja2 PyPI

    Versions
    • 2.0
    • 2.0rc1
    • 2.1
    • 2.1.1
    • 2.2
    • 2.2.1
    • 2.3
    • 2.3.1
    • 2.4
    • 2.4.1
    • 2.5
    • 2.5.1
    • 2.5.2
    • 2.5.3
    • 2.5.4
    • 2.5.5
    • 2.6
    • 2.7
    • 2.7.1
    Affected ranges
    • ECOSYSTEM: < 2.7.2

    Update to 2.7.2

Original sources

Check your server →