CVE-2009-5082: GNU Groff

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file.

Affected products

• GNU Groff: version 1.20.1 only

Published 2011-06-30. Last modified 2026-06-16.