The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade library/readline to version 7.0-11.4.7.0.1.2.0 on Solaris 11.4 | Mar 20, 2019 | Aug 20, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 14, 2014 |
| Suse | — | Upgrade bash-langUpgrade bash-develUpgrade crash-kmp-defaultUpgrade bash-docUpgrade libreadline7Upgrade readline-docUpgrade bashUpgrade crash-develUpgrade crashUpgrade libreadline6-32bitUpgrade libreadline6Upgrade crash-kmp-64kbUpgrade readline-devel | Dec 18, 2015 | Aug 20, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub