2017-11-15 17:29:00 2019-05-10 20:08:58

The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/${USER:shared}/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges.

Vector

LOCAL

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE
Scala-lang Scala 2.12.1 (not an official CPE) Scala-lang Scala 2.12.0 Rc2 (not an official CPE) Scala-lang Scala 2.12.0 Rc1 (not an official CPE) Scala-lang Scala 2.12.0 M5 (not an official CPE) Scala-lang Scala 2.12.0 M4 (not an official CPE) Scala-lang Scala 2.12.0 M3 (not an official CPE) Scala-lang Scala 2.12.0 M2 (not an official CPE) Scala-lang Scala 2.12.0 M1 (not an official CPE) Scala-lang Scala 2.12.0 (not an official CPE) Scala-lang Scala 2.11.11 (not an official CPE) Scala-lang Scala 2.11.10 (not an official CPE) Scala-lang Scala 2.11.9 (not an official CPE) Scala-lang Scala 2.11.8 (not an official CPE) Scala-lang Scala 2.11.7 (not an official CPE) Scala-lang Scala 2.11.6 (not an official CPE) Scala-lang Scala 2.11.5 (not an official CPE) Scala-lang Scala 2.11.4 (not an official CPE) Scala-lang Scala 2.11.3 (not an official CPE) Scala-lang Scala 2.11.2 (not an official CPE) Scala-lang Scala 2.11.1 (not an official CPE) Scala-lang Scala 2.11.0 Rc4 (not an official CPE) Scala-lang Scala 2.11.0 Rc3 (not an official CPE) Scala-lang Scala 2.11.0 Rc2 (not an official CPE) Scala-lang Scala 2.11.0 Rc1 (not an official CPE) Scala-lang Scala 2.11.0 M8 (not an official CPE) Scala-lang Scala 2.11.0 M7 (not an official CPE) Scala-lang Scala 2.11.0 M6 (not an official CPE) Scala-lang Scala 2.11.0 M5 (not an official CPE) Scala-lang Scala 2.11.0 M4 (not an official CPE) Scala-lang Scala 2.11.0 M3 (not an official CPE) Scala-lang Scala 2.12.2 (not an official CPE) Scala-lang Scala 2.11.0 M2 (not an official CPE) Scala-lang Scala 2.11.0 M1 (not an official CPE) Scala-lang Scala 2.11.0 (not an official CPE) Scala-lang Scala 2.12.3 (not an official CPE)