CVE-2024-5742

Name of the Vulnerable Software and Affected Versions GNU Nano (affected versions not specified)

Description A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink. The vulnerability is related to errors in handling temporary files, which can be exploited to impact data integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.