cnvd - cnvd-2020-01653

cnvd-2020-01653

Vulnerability from cnvd

Title

eDeploy竞争条件问题漏洞

Description

eDeploy是一款用于Linux系统的配置和更新工具。 eDeploy中存在竞争条件问题漏洞，该漏洞源于网络系统或产品在运行过程中，并发代码需要互斥地访问共享资源时，对于并发访问的处理不当。目前没有详细漏洞细节提供。

Severity

高

Formal description

厂商尚未提供漏洞修复方案，请关注厂商主页更新： https://github.com/redhat-cip/edeploy

Reference

https://access.redhat.com/security/cve/cve-2014-3701 https://security-tracker.debian.org/tracker/CVE-2014-3701 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701 https://nvd.nist.gov/vuln/detail/CVE-2014-3701

Impacted products

Name
Red Hat eDeploy

Show details on source website

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2014-3701",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3701"
    }
  },
  "description": "eDeploy\u662f\u4e00\u6b3e\u7528\u4e8eLinux\u7cfb\u7edf\u7684\u914d\u7f6e\u548c\u66f4\u65b0\u5de5\u5177\u3002\n\neDeploy\u4e2d\u5b58\u5728\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u5728\u8fd0\u884c\u8fc7\u7a0b\u4e2d\uff0c\u5e76\u53d1\u4ee3\u7801\u9700\u8981\u4e92\u65a5\u5730\u8bbf\u95ee\u5171\u4eab\u8d44\u6e90\u65f6\uff0c\u5bf9\u4e8e\u5e76\u53d1\u8bbf\u95ee\u7684\u5904\u7406\u4e0d\u5f53\u3002 \u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5c1a\u672a\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://github.com/redhat-cip/edeploy",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-01653",
  "openTime": "2020-01-09",
  "products": {
    "product": "Red Hat eDeploy"
  },
  "referenceLink": "https://access.redhat.com/security/cve/cve-2014-3701\r\nhttps://security-tracker.debian.org/tracker/CVE-2014-3701\r\nhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701\r\nhttps://nvd.nist.gov/vuln/detail/CVE-2014-3701",
  "serverity": "\u9ad8",
  "submitTime": "2019-12-15",
  "title": "eDeploy\u7ade\u4e89\u6761\u4ef6\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2014-3701 (GCVE-0-2014-3701)

Vulnerability from cvelistv5

Published

2019-12-15 21:21

Modified

2024-08-06 10:50

Severity ?

CWE

Multiple tmp file race condition flaws

Summary

eDeploy has tmp file race condition flaws

References

URL

Tags

	https://security-tracker.debian.org/tracker/CVE-2014-3701	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701	x_refsource_MISC
	https://access.redhat.com/security/cve/cve-2014-3701	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	eDeploy	eDeploy	Version: through 2014-10-14

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T10:50:18.265Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2014-3701"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701"
          },
          {
            "name": "Red Hat",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2014-3701"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "eDeploy",
          "vendor": "eDeploy",
          "versions": [
            {
              "status": "affected",
              "version": "through 2014-10-14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "eDeploy has tmp file race condition flaws"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Multiple tmp file race condition flaws",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-15T21:21:24",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2014-3701"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3701"
        },
        {
          "name": "Red Hat",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/cve-2014-3701"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-3701",
    "datePublished": "2019-12-15T21:21:24",
    "dateReserved": "2014-05-14T00:00:00",
    "dateUpdated": "2024-08-06T10:50:18.265Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.