CVE-2016-5026 Race condition in n/a

What is CVE-2016-5026?

CVE-2016-5026 is a medium-severity vulnerability in n/a, published on 30 Jan 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

Weakness: CWE-284

Which versions are affected by CVE-2016-5026?

It affects 1 product.

Products include Onionshare Onionshare.

How do I fix CVE-2016-5026?

Upgrade to a fixed version.

Is CVE-2016-5026 being exploited?

There is no known exploitation of CVE-2016-5026 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-41868 Remote unauthenticated attackers able to upload files in Onionshare Critical 9.8
• CVE-2022-21690 Cross-Site Scripting in Onionshare High 8.7
• CVE-2022-21688 Out-of-bounds Read in Onionshare High 7.5
• CVE-2022-21689 Denial of Service in Onionshare High 7.5
• CVE-2018-19960 Path traversal in n/a High 7.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2016-5026, GHSA-55hg-465f-gp62, UBUNTU-CVE-2016-5026.