CVE-2014-3219

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp...

7.8 HighFix available

CVE-2014-3219 is a high vulnerability (CVSS 7.8) in Fishshell Fish, published February 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in fish 2.1.1-1.

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.43%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: CVE-2014-3219
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 4.3 MediumAV:L/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-59
Updated: 2026-11-02

CVE List No score

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: CVE-2014-3219
Updated: 2026-11-02

EUVDEUVD-2014-3236 No score

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: EUVD-2014-3236
Updated: 2026-11-03

GitHub AdvisoriesGHSA-x4v8-3282-qp44 7.8

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp...

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: GHSA-x4v8-3282-qp44
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-59
Updated: 2026-11-02

OSV 7.8

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: CVE-2014-3219
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2014-3219 7.8

fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.

Record: DEBIAN-CVE-2014-3219
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2177-1 No score

Security update for fish3

This update supplies the 'fish3' package, complementary to the 'fish' package.

Record: openSUSE-SU-2019:2177-1
Updated: 2026-11-02

OSVopenSUSE-SU-2019:2188-1 No score

Security update for fish3

This update includes fish3 into the openSUSE Leap 15.1 distribution.

Record: openSUSE-SU-2019:2188-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10348-1 No score

fish-2.4.0-1.1 on GA media

These are all security issues fixed in the fish-2.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10348-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`fish` Debian:12	before 2.1.1-1	2.1.1-1
`fish` Debian:13	before 2.1.1-1	2.1.1-1
`fish` Debian:14	before 2.1.1-1	2.1.1-1
`fish3` openSUSE:Leap 15.0	before 3.0.0-lp150.3.1	3.0.0-lp150.3.1
`fish3` openSUSE:Leap 15.1	before 3.0.0-lp151.2.1	3.0.0-lp151.2.1
`fish` openSUSE:Tumbleweed	before 2.4.0-1.1	2.4.0-1.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 15 moreShow less