CVE-2014-2312

The main function in android_main.cpp in thermald allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid.

• CWE-59

• http://www.openwall.com/lists/oss-security/2014/03/08/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/03/09/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/03/08/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/03/09/2Mailing List, Third Party Advisory

Published

Mar 26, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2302The installer script in webEdition CMS before 6.2.7-s1 and 6…
• CVE-2014-2303Multiple SQL injection vulnerabilities in the file browser c…
• CVE-2014-2304A vulnerability in version 0.90 of the Open Floodlight SDN c…7.5
• CVE-2014-2309The ip6_route_add function in net/ipv6/route.c in the Linux …
• CVE-2014-2310The AgentX subagent in Net-SNMP before 5.4.4 allows remote a…
• CVE-2014-2311SQL injection vulnerability in modx.class.php in MODX Revolu…
• CVE-2014-2313Directory traversal vulnerability in the Importers plugin in…
• CVE-2014-2314Directory traversal vulnerability in the Issue Collector plu…
• CVE-2014-2315Multiple cross-site scripting (XSS) vulnerabilities in the T…
• CVE-2014-2316SQL injection vulnerability in se_search_default in the Sear…
• CVE-2014-2317SQL injection vulnerability in ajax_udf.php in OpenDocMan be…
• CVE-2014-2318SQL injection vulnerability in ATCOM Netvolution 3 allows re…