Launchpad.net

CVE 2015-5224

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

See the CVE page on Mitre.org for more details.