VDB

DEBIAN-CVE-2013-2035

DEBIAN-CVE-2013-2035 PUBLISHED CVSS 7.5 HIGH

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp.

Risk Scores

CVSS v4.0
7.5
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Debian:13hawtjni0, 0, 0
Debian:11hawtjni0, 0, 0
Debian:12hawtjni0, 0, 0
Debian:14hawtjni0, 0, 0

Timeline

  • Aug 28, 2013 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›