Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:readline:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductReadline (8d81c778-b22a-53d2-a3c7-31eaf9466acf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/readline purl2cpe 2026-06-01 10:11:53.813126
pkg:deb/ubuntu/readline purl2cpe 2026-06-01 10:11:53.813128
pkg:github/distrotech/readline purl2cpe 2026-06-01 10:11:53.813129
pkg:github/qunixorg/readline purl2cpe 2026-06-01 10:11:53.813130
pkg:github/val-verde/readline purl2cpe 2026-06-01 10:11:53.813132
pkg:gitlab/redhat/readline purl2cpe 2026-06-01 10:11:53.813133
pkg:gnu/readline purl2cpe 2026-06-01 10:11:53.813134
pkg:rpm/centos/readline purl2cpe 2026-06-01 10:11:53.813136
pkg:rpm/fedora/readline purl2cpe 2026-06-01 10:11:53.813137
pkg:rpm/opensuse/readline purl2cpe 2026-06-01 10:11:53.813138

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2524 vulnerable 2026-06-08 05:05:29.037413 Details available
The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.
Published: 2014-08-20T14:00:00.000Z
Updated: 2024-08-06T10:14:26.704Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.