The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libLLVMUpgrade libclangUpgrade libLLVM-debuginfoUpgrade libLLVM-debuginfo-32bitUpgrade llvm-devel-debuginfoUpgrade llvm-clang-debuginfoUpgrade llvm-debuginfoUpgrade llvmUpgrade llvm-clangUpgrade llvm-vim-pluginsUpgrade libclang-debuginfoUpgrade llvm-clang-develUpgrade libLLVM-32bitUpgrade llvm-develUpgrade llvm-debugsource | Dec 18, 2015 | Apr 23, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub