~ / search / GHSA-49j7-qghp-5wj8

GHSA-49j7-qghp-5wj8

Improper Control of Generation of Code in HawtJNI

Source: GitHub Advisory Database (reviewed) Moderate CVE-2013-2035

Packages

EcosystemPackageAffectedFixed in
Maven org.fusesource.hawtjni:hawtjni-runtime < 1.8 1.8

Details

As written in the advisory (Markdown source, shown as plain text).

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

References

External links from the advisory. They lead to third-party sites.