CVE-2014-4038: PPC64-Diag Project PPC64-Diag

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/snapH.tar.gz, or (3) lpd/test/lpd_ela_test.sh and /var/tmp/ras.

Affected products

• PPC64-Diag Project PPC64-Diag: version 2.6.1 only
• Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
• Suse Linux Enterprise Server: version 11 only

Published 2014-06-17. Last modified 2026-06-17.