CVE-2014-1876 — Link Following in Oracle Openjdk

CWE-59 — Link FollowingCWE-377 — Insecure Temporary File11 documents7 sources
Severity
4.4MEDIUMNVD
EPSS
0.1%
top 66.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Openjdk
Timeline
PublishedFeb 10
Latest updateMay 14

Description

The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary files when a log file cannot be opened, which allows local users to overwrite arbitrary files via a symlink attack on /tmp/unpack.log.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDoracle/openjdk1.6.0, 1.7.0, 1.8.0+2

🔴Vulnerability Details

3
GHSA
GHSA-97jm-5rh5-84f8: The unpacker::redirect_stdio function in unpack↗2022-05-14
▶
CVEList
CVE-2014-1876: The unpacker::redirect_stdio function in unpack↗2014-02-10
▶
OSV
CVE-2014-1876: The unpacker::redirect_stdio function in unpack↗2014-02-10
▶

📋Vendor Advisories

3
Ubuntu
OpenJDK 6 vulnerabilities↗2014-05-01
▶
Ubuntu
OpenJDK 7 vulnerabilities↗2014-04-30
▶
Red Hat
OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)↗2014-02-03
▶

💬Community

4
Bugzilla
CVE-2014-6476 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)↗2014-10-14
▶
Bugzilla
CVE-2014-6527 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)↗2014-10-14
▶
Bugzilla
CVE-2014-6456 Oracle JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)↗2014-10-14
▶
Bugzilla
CVE-2014-1876 OpenJDK: insecure temporary file use in unpack200 (Libraries, 8033618)↗2014-02-03
▶
CVE-2014-1876 — Link Following in Oracle Openjdk | cvebase