NVD

Id
22144  
Name
CVE-2016-8605  
Description
The mkdir procedure of GNU Guile temporarily changed the process" umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2017-01-12  
Modified Date
2017-01-18  
Seq
2016-8605  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118164 22144 CVE-2016-8605 [oss-security] 20161012 Re: CVE request: GNU Guile <= 2.0.12: Thread-unsafe umask modification  View
118165 22144 CVE-2016-8605 93510  View
118166 22144 CVE-2016-8605 FEDORA-2016-0aab71f552  View
118167 22144 CVE-2016-8605 FEDORA-2016-a47bf58beb  View
118168 22144 CVE-2016-8605 FEDORA-2016-34209c3a8e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64616 JVNDB-2016-006889 GNU Guile の mkdir プロシージャにおけるプロセスの umask をゼロに変更される脆弱性 GNU Guile の mkdir プロシージャには、プロセスの umask をゼロに変更される脆弱性が存在します。 CVE-2016-8605 CVE-2016-8605 22144 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006889.html 2016-10-11 2017-01-27 View