GNU Parallel vulnerabilities

2 CVEs affecting GNU Parallel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-4156, published 2015-06-02.

More from GNU.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-4155, published 2015-06-02. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. GNU Parallel before 20150422, when using (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo, or (5) --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file.
• CVE-2015-4156, published 2015-06-02. Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days. GNU Parallel before 20150522 (Nepal), when using (1) --cat or (2) --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file.