devscripts contains a flaw that may allow a local denial of service. The issue is triggered when an error occurs in annotate-output when it is determining the name of temporary named pipes. This may allow a local attacker to terminate the pipes early, which will result in a loss of availability.
Classification
Location:
Local Access Required
Attack Type:
Denial of Service,
Race Condition
Impact:
Loss of Availability
Solution:
Third-Party Solution
Exploit:
Exploit Unknown
Disclosure:
Third-party Verified
OSVDB:
Authentication Required
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, Debian has released updated packages to address this vulnerability. Check the vendor advisory or solution in the references section.
