{"action":"Upgrade ppc64-diag to 2.7.1-5 or later.","affected":[{"fixed":"2.7.1-5","introduced":"0"}],"component":"ppc64-diag","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2.7.1-5"],"id":"tcs_01M5NATHXSVE1TCPH6D2EM4HJW","modified_at":"2026-10-26T16:01:21.386333072Z","published_at":"2014-06-17T15:55:06.177Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-4038","https://security-tracker.debian.org/tracker/CVE-2014-4038"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-4038","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-4038"}],"summary":"ppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to (1) rtas_errd/diag_support.c and /tmp/get_dt_files, (2) scripts/ppc64_diag_mkrsrc and /tmp/diagSEsnap/s"}