CVE-2014-2524

Name of the Vulnerable Software and Affected Versions GNU readline versions prior to 6.3 patch 3

Description The issue allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file. This is related to the rl tropen function in util.c.

Recommendations For versions prior to 6.3 patch 3, update to version 6.3 patch 3 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/tmp directory to minimize the risk of exploitation.