CVE catalog

CVE-2014-2524

bash-4.4-92.1 on GA media

Severity: Unknown
Published: Aug 20, 2014, 2:55:00 PM UTC
Updated: Apr 22, 2026, 9:37:34 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.42% · Oct 25, 2026

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	readline6	14.04	`6.2-9ubuntu1`	vulnerable
Ubuntu	readline6	14.04	`6.3-1ubuntu1`	vulnerable
Ubuntu	readline6	14.04	`6.3-1ubuntu2`	vulnerable
Ubuntu	readline6	14.04	`6.3-4ubuntu1`	vulnerable
Ubuntu	readline6	14.04	`6.3-4ubuntu2`	vulnerable
Opensuse	crash	tumbleweed	`7.1.5_k4.8.13_1-3.51`	fixed
Opensuse	bash	tumbleweed	`7.0-92.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	crash	rpm	tumbleweed	`7.1.5_k4.8.13_1-3.51`	Not reported	OPENSUSE-SU-2024:10111-1	Not reported
Opensuse	bash	rpm	tumbleweed	`7.0-92.1`	Not reported	OPENSUSE-SU-2024:10106-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[bash]Affected
Source package: [bash]
Details (1)
- 5.3.15-8.2 · x86_64 · tumbleweed
  Affected · Fixed: 7.0-92.1
  pypi · bash · opensuse · tumbleweed
[bash-devel]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · x86_64 · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[bash-doc]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · noarch · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[bash-lang]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · noarch · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[bash-legacybin]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · noarch · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[bash-loadables]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · x86_64 · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[bash-sh]Unknown
Source package: [bash]
Details (1)
- 5.3.15-8.2 · noarch · tumbleweed
  Unknown · Fixed: 7.0-92.1
  Version impact unknown
  pypi · bash · opensuse · tumbleweed
[crash-devel]Unknown
Source package: [crash]
Details (1)
- 9.0.2-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 7.1.5_k4.8.13_1-3.51
  Version impact unknown
  pypi · crash · opensuse · tumbleweed
[crash-doc]Unknown
Source package: [crash]
Details (1)
- 9.0.2-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 7.1.5_k4.8.13_1-3.51
  Version impact unknown
  pypi · crash · opensuse · tumbleweed
[crash-gcore]Unknown
Source package: [crash]
Details (1)
- 9.0.2-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 7.1.5_k4.8.13_1-3.51
  Version impact unknown
  pypi · crash · opensuse · tumbleweed
[crash-kmp-default]Unknown
Source package: [crash]
Details (1)
- 9.0.2_k7.2.0_1-1.4 · x86_64 · tumbleweed
  Unknown · Fixed: 7.1.5_k4.8.13_1-3.51
  Version impact unknown
  pypi · crash · opensuse · tumbleweed
[crash]Fixed
Source package: [crash]
Details (1)
- 9.0.2-1.4 · x86_64 · tumbleweed
  Fixed · Fixed: 7.1.5_k4.8.13_1-3.51
  pypi · crash · opensuse · tumbleweed

Observed: Oct 23, 2026, 5:10:20 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]