{"id":"CVE-2017-8418","aliases":["DEBIAN-CVE-2017-8418","EUVD-2017-0354","GHSA-wmjf-jpjj-9f3j","UBUNTU-CVE-2017-8418"],"status":"published","title":"RuboCop gem Insecure use of /tmp","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00409,"percentile":0.35438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-668"],"published":"2017-05-02T14:00:00Z","modified":"2026-10-20T10:50:15Z","fixes":[{"ecosystem":"RubyGems","package":"rubocop","fixed_in":["0.49.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"rubocop","fixed_in":["0.49.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rubocop","fixed_in":["0.49.1+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rubocop","fixed_in":["0.49.1+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"rubocop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rubocop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rubocop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rubocop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.1+dfsg-1"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"rubocop","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.49.0"}]}],"versions":["0.0.0","0.1.0","0.10.0","0.11.0","0.11.1","0.12.0","0.13.0","0.13.1","0.14.0","0.14.1","0.15.0","0.16.0","0.17.0","0.18.0","0.18.1","0.19.0","0.19.1","0.2.0","0.2.1","0.20.0","0.20.1","0.21.0","0.22.0","0.23.0","0.24.0","0.24.1","0.25.0","0.26.0","0.26.1","0.27.0","0.27.1","0.28.0","0.29.0","0.29.1","0.3.0","0.3.1","0.3.2","0.30.0","0.30.1","0.31.0","0.32.0","0.32.1","0.33.0","0.34.0","0.34.1","0.34.2","0.35.0","0.35.1","0.36.0","0.37.0","0.37.1","0.37.2","0.38.0","0.39.0","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.4.6","0.40.0","0.41.0","0.41.1","0.41.2","0.42.0","0.43.0","0.44.0","0.44.1","0.45.0","0.46.0","0.47.0","0.47.1","0.48.0","0.48.1","0.5.0","0.6.0","0.6.1","0.7.0","0.7.1","0.7.2","0.8.0","0.8.1","0.8.2","0.8.3","0.9.0","0.9.1"]}],"products":[{"vendor":"rubocop_project","product":"rubocop"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2017/05/01/14","tags":["x_refsource_MISC","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence","web","report"]},{"url":"https://github.com/bbatsov/rubocop/issues/4336","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8418","tags":["advisory"]},{"url":"https://github.com/rubocop/rubocop/commit/dcb258fabd5f2624c1ea0e1634763094590c09d7","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubocop/CVE-2017-8418.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wmjf-jpjj-9f3j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-8418","tags":["advisory"]},{"url":"https://github.com/bbatsov/rubocop","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2017-8418","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8418","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-8418","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-05-02T14:00:00Z","modified":"2024-09-16T18:18:03.849Z","updated_at":"2026-11-02T14:33:14.89365Z"}],"euvd":[{"id":"EUVD-2017-0354","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-05-02T14:00:00Z","modified":"2024-09-16T18:18:03Z","updated_at":"2026-11-03T00:55:33.878386Z"}],"ghsa":[{"id":"GHSA-wmjf-jpjj-9f3j","title":"RuboCop gem Insecure use of /tmp","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-11-15T20:39:47Z","modified":"2023-08-28T13:43:42Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:37:01.345964Z"}],"nvd":[{"id":"CVE-2017-8418","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-05-02T14:59:00.783Z","modified":"2026-06-17T01:26:21.51Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:03:47.848196Z"}],"osv":[{"id":"CVE-2017-8418","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-05-02T14:59:00.783Z","modified":"2026-10-20T10:50:15.19811355Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:06.868403Z"},{"id":"DEBIAN-CVE-2017-8418","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-05-02T14:59:00.783Z","modified":"2026-09-01T20:03:51.291733032Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:29.698576Z"},{"id":"GHSA-wmjf-jpjj-9f3j","title":"RuboCop gem Insecure use of /tmp","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"published","published":"2017-11-15T20:39:47Z","modified":"2024-02-16T08:14:31.038093Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T15:46:58.767335Z"},{"id":"UBUNTU-CVE-2017-8418","description":"RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.","status":"withdrawn","published":"2017-05-02T14:59:00Z","modified":"2025-07-16T07:37:19.47366Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:16.154988Z"}]}}