Insecure Creation of Temporary Files in python-rply
Summary
CVE-2014-1938: python-rply before 0.7.4 insecurely creates temporary files. Affects python-rply versions < 0.7.4-1. Fixed in 0.7.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-rply is a Python library used for creating parsers. It provides a simple and efficient way to define and parse complex grammars. This vulnerability affects python-rply versions before 0.7.4. The library insecurely creates temporary files, which can lead to potential security risks.
Vulnerability Detail
The vulnerability (CVE-2014-1938) in python-rply arises from the insecure creation of temporary files. This can be exploited by an attacker to gain unauthorized access to sensitive information or execute arbitrary code on the affected system. The vulnerability has a CVSSv3 score of 5.5, indicating a moderate severity level.
How To Fix
Minimum fixed version
0.7.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade python-rplyTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
Insecure creation of temporary files in python-rply (CVE-2014-1938) poses a moderate security risk. It is recommended to update to python-rply version 0.7.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for python-rply →
FAQ
python-rply is a Python library used for creating parsers. It provides a simple and efficient way to define and parse complex grammars.
The vulnerability allows an attacker to gain unauthorized access to sensitive information or execute arbitrary code on the affected system.
The CVSSv3 score of this vulnerability is 5.5, indicating a moderate severity level.
To fix this vulnerability, update python-rply to version 0.7.4 or later by running the command 'pip install --upgrade python-rply'.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for python-rply.
