What is GHSA-846g-25mr-v9p5?

GHSA-846g-25mr-v9p5 is a security advisory published by GitHub Security Advisories with Medium severity. (1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to...

Which CVE IDs does GHSA-846g-25mr-v9p5 cover?

GHSA-846g-25mr-v9p5 covers the following CVE IDs: CVE-2013-0261. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-846g-25mr-v9p5?

GHSA-846g-25mr-v9p5 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-846g-25mr-v9p5MediumCVSS 8.8

(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to...

Vendor

GitHub Security Advisories

Published

May 5, 2022

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2013-0261 →

📋 Description

(1) installer/basedefs.py and (2) modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-0261
https://bugzilla.redhat.com/show_bug.cgi?id=908101
http://rhn.redhat.com/errata/RHSA-2013-0595.html
https://access.redhat.com/security/cve/CVE-2013-0261
https://access.redhat.com/errata/RHSA-2013:0595
https://github.com/advisories/GHSA-846g-25mr-v9p5