CVE-2014-4038

MEDIUM · CVSS 4.4 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-06-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-4038

Severity

MEDIUM

CVSS

4.4

EPSS

0.35%

Original Filing — NVD Description

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.