Ppc64-diag Project Ppc64-diag — known CVE vulnerabilities

Every CVE whose affected-product data names Ppc64-diag Project Ppc64-diag, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2014-4038 — CVSS 4.4 (medium): ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and…
• CVE-2014-4039 — CVSS 2.1 (low): ppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict permissions for /tmp/diagSEsnap/snapH.tar.gz…