| Name | CVE-2024-5742 |
| Description | A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-3831-1, ELA-1109-1 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| nano (PTS) | jessie, jessie (lts) | 2.2.6-3+deb8u1 | fixed |
| stretch (lts), stretch | 2.7.4-1+deb9u1 | fixed |
| buster (security), buster, buster (lts) | 3.2-3+deb10u1 | fixed |
| bullseye | 5.4-2+deb11u3 | fixed |
| bookworm | 7.2-1+deb12u1 | fixed |
| sid, trixie | 8.2-1 | fixed |
The information below is based on the following data on fixed versions.
Notes
Introduced by: https://git.savannah.gnu.org/cgit/nano.git/commit/?id=123110c5dc3e0d8c60a4ff0121056e301f503706 (v2.1.99pre2)
Fixed by: https://git.savannah.gnu.org/cgit/nano.git/commit/?id=5e7a3c2e7e118c7f12d5dfda9f9140f638976aa2 (v8.0)