PatchTheCVEscientificlinux vulnerabilities
Recent CVEs affecting scientificlinux products. 3 tracked.
scientificlinux has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-10-15. Highest priority: CVE-2014-3593 (score 44/100).
- CVE-2014-3593 MEDIUM 6.0 DOWNGRADE Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to exec
- CVE-2013-4482 MEDIUM 6.2 DOWNGRADE MITIGATE Untrusted search path vulnerability in python-paste-script (aka paster) in Luci 0.26.0, when started using the
- CVE-2013-4481 LOW 1.9 DOWNGRADE MITIGATE Race condition in Luci 0.26.0 creates /var/lib/luci/etc/luci.ini with world-readable permissions before restri
FAQ
How do I fix scientificlinux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is scientificlinux being exploited right now?
None of the tracked scientificlinux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which scientificlinux CVE should I patch first?
CVE-2014-3593 currently ranks highest (44/100): Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to exec.