Vulnerabilities > Fishshell > Fish > High

DATE CVE VULNERABILITY TITLE RISK
2022-03-14 CVE-2022-20001 fish is a command line shell.
local
low complexity
fishshell fedoraproject debian
7.8
2020-01-28 CVE-2014-3856 Race Condition vulnerability in Fishshell Fish
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
local
high complexity
fishshell CWE-362
7.0
2020-01-28 CVE-2014-2906 Race Condition vulnerability in Fishshell Fish
The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.
local
high complexity
fishshell CWE-362
7.0
2018-02-09 CVE-2014-3219 Link Following vulnerability in multiple products
fish before 2.1.1 allows local users to write to arbitrary files via a symlink attack on (1) /tmp/fishd.log.%s, (2) /tmp/.pac-cache.$USER, (3) /tmp/.yum-cache.$USER, or (4) /tmp/.rpm-cache.$USER.
local
low complexity
fishshell fedoraproject CWE-59
7.8