CVE-2014-1402

Jinja2 < 2.7.2 - Local Privilege Escalation via Temporary File Handling

Title source: llm
STIX 2.1

Description

The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

References (17)

Core 17
Core References
Various Sources mailing-list x_refsource_mlist
https://oss.oracle.com/pipermail/el-errata/2014-June/004192.html
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/01/10/3
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59017
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/56287
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58783
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58918
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60738
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1051421
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60770
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0747.html
Various Sources x_refsource_confirm
http://jinja.pocoo.org/docs/changelog/
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-201408-13.xml
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/01/10/2
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0028.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2014-0748.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2014:096

Scores

EPSS 0.0037
EPSS Percentile 29.8%

Details

CWE
CWE-264
Status published
Products (19)
pocoo/jinja2 2.0 (2 CPE variants)
pocoo/jinja2 2.1
pocoo/jinja2 2.1.1
pocoo/jinja2 2.2
pocoo/jinja2 2.2.1
pocoo/jinja2 2.3
pocoo/jinja2 2.3.1
pocoo/jinja2 2.4
pocoo/jinja2 2.4.1
pocoo/jinja2 2.5
... and 9 more
Published May 19, 2014
Tracked Since Feb 18, 2026