PatchTheCVEnoweb vulnerabilities and fixes
Recent CVEs affecting noweb, with upgrade or downgrade steps. 2 tracked.
noweb has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2005-12-31. Highest priority: CVE-2005-3342 (score 16/100).
- CVE-2005-3342 LOW 1.2 DOWNGRADE noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files
- CVE-2003-0381 LOW 2.1 UPGRADE Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users
FAQ
How do I fix noweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is noweb being exploited right now?
None of the tracked noweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which noweb CVE should I patch first?
CVE-2005-3342 currently ranks highest (16/100): noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files.