Every CVE Search/ Get API key

CVE-2014-4038

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...

4.4 MediumFix available

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Exploit likelihood

0.35%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.4

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
CVE-2014-4038
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
CVE-2014-4038
Updated
2026-11-02
EUVDEUVD-2014-3969 No score

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
EUVD-2014-3969
Updated
2026-11-03
GitHub AdvisoriesGHSA-8gvg-vxvq-qh2r No score

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
GHSA-8gvg-vxvq-qh2r
Weakness
CWE-59
Updated
2026-11-02
OSV No score

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
CVE-2014-4038
Updated
2026-11-02
OSVDEBIAN-CVE-2014-4038 No score

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Record
DEBIAN-CVE-2014-4038
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ppc64-diag
Debian:12
 before 2.7.1-5
2.7.1-5
ppc64-diag
Debian:14
 before 2.7.1-5, plus listed versions
2.7.1-12.7.1-22.7.1-32.7.1-4
2.7.1-5
ppc64-diag
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.6.7-6.el7
0:2.6.7-6.el7
ppc64-diag-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:2.6.7-6.el7
0:2.6.7-6.el7
ppc64-diag
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.7-4.el6
0:2.6.7-4.el6
ppc64-diag-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.6.7-4.el6
0:2.6.7-4.el6

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4038 is a medium vulnerability (CVSS 4.4) in Ppc64-diag Project Ppc64-diag, published June 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in ppc64-diag 2.7.1-5.

References

Show 16 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open