CVE Catalog
CVE-2024-5742
LowSummary
A vulnerability in GNU Nano allows privilege escalation through an insecure temporary file. If Nano is killed while editing, it saves an emergency file with the permissions of the running user.
Risk Assessment
An attacker can exploit the time window after Nano is killed to escalate privileges on the system.
Recommendation
Update GNU Nano to a version containing the fix for CVE-2024-5742.
Original NVD description (English source)
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges t