CVE-2013-2217 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-2217 Interim 1 16 2025-11-05T05:24:03Z current 2021-05-30T13:11:47Z 2025-11-05T05:24:03Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-2217 cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2013-July/000532.html E-Mail link for SUSE-SU-2013:1216-1 https://lists.suse.com/pipermail/sle-security-updates/2014-January/000685.html E-Mail link for SUSE-SU-2014:0061-1 https://lists.suse.com/pipermail/sle-security-updates/2016-November/002388.html E-Mail link for SUSE-SU-2016:2704-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TSJEZDTS6TFB5Y7YFY6OCIAPP6ADGFJ4/ E-Mail link for openSUSE-SU-2025:15105-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Server 16.0 SUSE OpenStack Cloud 2.0 SUSE OpenStack Cloud 6 openSUSE Tumbleweed python-suds-0.4-0.18.1 python-suds-jurko-0.6-4.1 python310-suds-1.1.1-1.1 python311-suds-1.2.0-2.4 python312-suds-1.2.0-2.4 python313-suds-1.2.0-160000.2.2 python313-suds-1.2.0-2.4 python36-suds-community-0.8.5-1.1 python36-suds-jurko-0.6-6.9 python38-suds-1.1.1-1.1 python38-suds-community-0.8.5-1.1 python38-suds-jurko-0.6-6.9 python39-suds-1.1.1-1.1 python39-suds-community-0.8.5-1.1 python39-suds-jurko-0.6-6.9 python313-suds-1.2.0-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 python-suds-0.4-0.18.1 as a component of SUSE OpenStack Cloud 2.0 python-suds-jurko-0.6-4.1 as a component of SUSE OpenStack Cloud 6 python-suds-jurko-0.6-4.1 as a component of openSUSE Tumbleweed python310-suds-1.1.1-1.1 as a component of openSUSE Tumbleweed python311-suds-1.2.0-2.4 as a component of openSUSE Tumbleweed python312-suds-1.2.0-2.4 as a component of openSUSE Tumbleweed python313-suds-1.2.0-2.4 as a component of openSUSE Tumbleweed python36-suds-community-0.8.5-1.1 as a component of openSUSE Tumbleweed python36-suds-jurko-0.6-6.9 as a component of openSUSE Tumbleweed python38-suds-1.1.1-1.1 as a component of openSUSE Tumbleweed python38-suds-community-0.8.5-1.1 as a component of openSUSE Tumbleweed python38-suds-jurko-0.6-6.9 as a component of openSUSE Tumbleweed python39-suds-1.1.1-1.1 as a component of openSUSE Tumbleweed python39-suds-community-0.8.5-1.1 as a component of openSUSE Tumbleweed python39-suds-jurko-0.6-6.9 as a component of openSUSE Tumbleweed cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/. CVE-2013-2217 SUSE Linux Enterprise Server 16.0:python313-suds-1.2.0-160000.2.2 SUSE OpenStack Cloud 2.0:python-suds-0.4-0.18.1 SUSE OpenStack Cloud 6:python-suds-jurko-0.6-4.1 openSUSE Tumbleweed:python-suds-jurko-0.6-4.1 openSUSE Tumbleweed:python310-suds-1.1.1-1.1 openSUSE Tumbleweed:python311-suds-1.2.0-2.4 openSUSE Tumbleweed:python312-suds-1.2.0-2.4 openSUSE Tumbleweed:python313-suds-1.2.0-2.4 openSUSE Tumbleweed:python36-suds-community-0.8.5-1.1 openSUSE Tumbleweed:python36-suds-jurko-0.6-6.9 openSUSE Tumbleweed:python38-suds-1.1.1-1.1 openSUSE Tumbleweed:python38-suds-community-0.8.5-1.1 openSUSE Tumbleweed:python38-suds-jurko-0.6-6.9 openSUSE Tumbleweed:python39-suds-1.1.1-1.1 openSUSE Tumbleweed:python39-suds-community-0.8.5-1.1 openSUSE Tumbleweed:python39-suds-jurko-0.6-6.9 moderate 3.2 AV:L/AC:L/Au:S/C:N/I:P/A:P