Vulnerability · Published Dec 9, 2024 · Assigned by mitre
CVE-2024-55566
Medium 6.6
In plain English
A medium-severity security flaw in the colpack package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities).
Severity (CVSS 3.1)6.6Medium
Exploit odds (30 days)0.2%top 87.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). The impact can be overwriting files or making ColPack graphing unavailable to other users.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | colpack | no fix listed | DEBIAN-CVE-2024-55566 |
| Debian:13 | colpack | no fix listed | DEBIAN-CVE-2024-55566 |
| Debian:14 | colpack | no fix listed | DEBIAN-CVE-2024-55566 |
| Ubuntu:22.04:LTS | colpack | no fix listed | UBUNTU-CVE-2024-55566 |
| Ubuntu:24.04:LTS | colpack | no fix listed | UBUNTU-CVE-2024-55566 |
| Ubuntu:25.10 | colpack | no fix listed | UBUNTU-CVE-2024-55566 |
| Ubuntu:26.04:LTS | colpack | no fix listed | UBUNTU-CVE-2024-55566 |
| Ubuntu:26.10 | colpack | no fix listed | UBUNTU-CVE-2024-55566 |
Affected products (as reported)
Weakness: CWE-335 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H