CVE-2013-4159: Ctdb Project Ctdb

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

ctdb before 2.3 in OpenSUSE 12.3 and 13.1 does not create temporary files securely, which has unspecified impact related to "several temp file vulnerabilities" in (1) tcp/tcp_connect.c, (2) server/eventscript.c, (3) tools/ctdb_diagnostics, (4) config/gdb_backtrace, and (5) include/ctdb_private.h.

Affected products

• Ctdb Project Ctdb: up to and including 2.2; version 2.0 only; version 2.1 only
• Mageia Mageia: version 3.0 only; version 4.0 only
• Opensuse Opensuse: version 12.3 only; version 13.1 only

Published 2014-08-06. Last modified 2026-06-16.