CVE-2015-5701: Tug Texlive

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700.

Affected products

• Tug Texlive: version 20100722 only; version 20110705 only; version 20120701 only; version 20130530 only; version 20140525 only

Published 2017-08-25. Last modified 2026-06-17.