Skip to content

CVE-2015-4156

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows...

3.6 LowFix available

CVE-2015-4156 is a low vulnerability (CVSS 3.6) in Gnu Parallel, published June 2, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in parallel 20161222-1.

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Exploit likelihood

0.37%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 3.6

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2015-4156
CVSS 2.0: 3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2015-4156
Updated: 2026-11-02

EUVDEUVD-2015-4180 No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: EUVD-2015-4180
Updated: 2026-11-03

GitHub AdvisoriesGHSA-c272-w43g-64p3 No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows...

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: GHSA-c272-w43g-64p3
Weakness: CWE-59
Updated: 2026-11-02

OSV No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: CVE-2015-4156
Updated: 2026-11-02

OSVDEBIAN-CVE-2015-4156 No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: DEBIAN-CVE-2015-4156
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-4156 No score

GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.

Record: UBUNTU-CVE-2015-4156
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`parallel` Debian:12	before 20161222-1	20161222-1
`parallel` Debian:13	before 20161222-1	20161222-1
`parallel` Debian:14	before 20161222-1	20161222-1
`parallel` Ubuntu:16.04:LTS	before 20161222-1~ubuntu0.16.04.1, plus listed versions 20141022+ds1-1	20161222-1~ubuntu0.16.04.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References