CVE-2012-3386: GNU Automake

Medium severity, CVSS 4.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.

Affected products

• GNU Automake: up to and including 1.11.5; version 1.0 only; version 1.2 only; version 1.3 only; version 1.4 only; version 1.5 only; …

Published 2012-08-07. Last modified 2026-06-16.