Candidate: CVE-2014-1859
PublicDate: 2018-01-08 19:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1859
Description:
 (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3)
 f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow
 local users to write to arbitrary files via a symlink attack on a temporary
 file.
Ubuntu-Description:
Notes:
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737778
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N [5.5 MEDIUM]

Tags_python-numpy: hardlink-restriction symlink-restriction
Patches_python-numpy:
 upstream: https://github.com/numpy/numpy/commit/0bb46c1448b0d3f5453d5182a17ea7ac5854ee15
upstream_python-numpy: needed
lucid_python-numpy: ignored (reached end-of-life)
precise_python-numpy: ignored (reached end-of-life)
precise/esm_python-numpy: DNE (precise was needed)
quantal_python-numpy: ignored (reached end-of-life)
saucy_python-numpy: ignored (reached end-of-life)
trusty_python-numpy: ignored (reached end-of-life)
trusty/esm_python-numpy: DNE (trusty was needed)
utopic_python-numpy: ignored (reached end-of-life)
vivid_python-numpy: ignored (reached end-of-life)
vivid/stable-phone-overlay_python-numpy: DNE
vivid/ubuntu-core_python-numpy: DNE
wily_python-numpy: ignored (reached end-of-life)
xenial_python-numpy: not-affected (1:1.8.1~rc1-1)
esm-infra/xenial_python-numpy: not-affected (1:1.8.1~rc1-1)
yakkety_python-numpy: ignored (reached end-of-life)
zesty_python-numpy: ignored (reached end-of-life)
artful_python-numpy: ignored (reached end-of-life)
bionic_python-numpy: not-affected (1:1.8.1~rc1-1)
cosmic_python-numpy: not-affected (1:1.8.1~rc1-1)
disco_python-numpy: not-affected (1:1.8.1~rc1-1)
devel_python-numpy: not-affected (1:1.8.1~rc1-1)