CVE-2024-55566

MEDIUM

ColPack 1.0.10-9a7293a - Predictable Temporary File via Unseeded PRNG

Title source: llm
STIX 2.1

Description

ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.

References (3)

Core 3

Scores

CVSS v3 6.6
EPSS 0.0021
EPSS Percentile 11.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-335
Status published
Published Dec 09, 2024
Tracked Since Feb 18, 2026