CVE-2016-8605
- State
- Published
- Severity
- Not scored
- Published
- Jan 12, 2017
- Updated
- Aug 6, 2024
- Reserved
- Oct 11, 2016
Description
The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode argument would create directories as 0777. This is fixed in Guile 2.0.13. Prior versions are affected.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2016-0aab71f552vendor-advisory
- FEDORA-2016-34209c3a8evendor-advisory
- FEDORA-2016-a47bf58bebvendor-advisory
- 93510vdb-entry
- [oss-security] 20161012 Re: CVE request: GNU Guile <= 2.0.12: Thread-unsafe umask modificationmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.