Description

Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when exist_ok is set to true and multiple threads are used, might allow local users to bypass intended file permissions by leveraging a separate application vulnerability before the umask has been set to the expected value.

Remediation

References

CVE-2014-2667

Related Vulnerabilities

WordPress Plugin ClickBank Affiliate Ads Multiple Vulnerabilities (1.7)

phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6624)

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0309)

WordPress Plugin WP Maintenance Mode Cross-Site Request Forgery (1.8.7)

WordPress Plugin Conditional Marketing Mailer for WooCommerce Cross-Site Request Forgery (1.5.2)

Severity

Low

Classification

CVE-2014-2667 CWE-362

Tags

Missing Update Known Vulnerabilities