Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-8991

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.2%
CVSS Severity
CVSS v2 Score 2.1
Products affected by CVE-2014-8991
  • Pypa » Pip » Version: 1.3
    cpe:2.3:a:pypa:pip:1.3
  • Pypa » Pip » Version: 1.3.1
    cpe:2.3:a:pypa:pip:1.3.1
  • Pypa » Pip » Version: 1.4
    cpe:2.3:a:pypa:pip:1.4
  • Pypa » Pip » Version: 1.4.1
    cpe:2.3:a:pypa:pip:1.4.1
  • Pypa » Pip » Version: 1.5
    cpe:2.3:a:pypa:pip:1.5
  • Pypa » Pip » Version: 1.5.1
    cpe:2.3:a:pypa:pip:1.5.1
  • Pypa » Pip » Version: 1.5.2
    cpe:2.3:a:pypa:pip:1.5.2
  • Pypa » Pip » Version: 1.5.3
    cpe:2.3:a:pypa:pip:1.5.3
  • Pypa » Pip » Version: 1.5.4
    cpe:2.3:a:pypa:pip:1.5.4
  • Pypa » Pip » Version: 1.5.5
    cpe:2.3:a:pypa:pip:1.5.5
  • Pypa » Pip » Version: 1.5.6
    cpe:2.3:a:pypa:pip:1.5.6
  • Oracle » Solaris » Version: 11.2
    cpe:2.3:o:oracle:solaris:11.2


Contact Us

Shodan ® - All rights reserved