CVE-2012-1088: IPROUTE2 Project IPROUTE2

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (1) configure or (2) examples/dhcp-client-script.

Affected products

• IPROUTE2 Project IPROUTE2: up to and including 3.2.0; version 3.0.0 only; version 3.1.0 only

Published 2014-02-15. Last modified 2026-06-16.