What’s Vulnerable › Vulnerabilities

CVE-2011-2765: Insecure temporary file handling

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-08-20 · updated 2026-06-16
• Weakness: CWE-59

Description

pyro before 3.15 unsafely handles pid files in temporary directory locations and opening the pid file as root. An attacker can use this flaw to overwrite arbitrary files via symlinks.

Affected products

• Pyro Project Pyro: before 3.15 — fixed in 3.15

How to fix

Upgrade to a fixed version: Pyro Project Pyro 3.15. Check the vendor advisory for mitigations.

References

• https://bugs.debian.org/631912
• https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e
• https://pythonhosted.org/Pyro/12-changes.html
• https://bugs.debian.org/631912
• https://github.com/irmen/Pyro3/commit/554e095a62c4412c91f981e72fd34a936ac2bf1e
• https://pythonhosted.org/Pyro/12-changes.html

Get alerted when CVE-2011-2765 or the next vulnerability affects your stack