Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
fish 竞争条件问题漏洞
Vulnerability Description
Fish-shell（也称Fish）是挪威软件开发者Axel Liljencrantz所研发的一个专注于交互应用、易用性和友好的用户体验的Unix shell（命令行界面），它支持语法高亮显示、高级的Tab键自动补完等功能。 fish 1.23.0版本至2.1.1版本（不含2.1.1版本）中的‘funced’函数存在竞争条件问题漏洞，该漏洞源于未正确创建临时文件。本地攻击者可借助名称可预测的临时文件利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A