CVE-2014-2905
EPSS 0.04%Published: 5/2/2014Modified: 4/28/2026
Also known as:DEBIAN-CVE-2014-2905
Description
fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly check the credentials, which allows local users to gain privileges via the universal variable socket, related to /tmp/fishd.socket.user permissions.
Affected packages (1)
- Debian/fishfrom 0, < 2.1.1-1