Advisory Database
  • Advisories
  • Dependency Scanning
  1. gem
  2. ›
  3. ruby_parser
  4. ›
  5. CVE-2013-0162

CVE-2013-0162: Incorrect temporary file usage

March 1, 2013

The ruby_parser Gem does not create temporary files securely. In the diff_pp function contained in lib/gauntlet_rubyparser.rb function, it creates files as /tmp/a.[pid] and /tmp/b.[pid] which can be predicted and used for either a denial of service (file cannot be overwritten), or to change the contents of files that are writable.

References

  • bugzilla.redhat.com/show_bug.cgi?id=892806

Code Behaviors & Features

Detect and mitigate CVE-2013-0162 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →

Affected versions

All versions starting from 2.0.2 up to 3.1.1

Fixed versions

  • 3.1.2

Solution

Patch available (see source)

Impact 2.1 LOW

AV:L/AC:L/Au:N/C:N/I:P/A:N

Learn more about CVSS

Weakness

  • CWE-264

Source file

gem/ruby_parser/CVE-2013-0162.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sun, 08 Nov 2026 00:15:41 +0000.