CVE-2013-2142 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-2142 Interim 1 44 2025-11-05T05:24:18Z current 2021-05-30T13:11:37Z 2025-11-05T05:24:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-2142 userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.0 openSUSE Tumbleweed imobiledevice-tools imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 imobiledevice-tools-1.2.0-3.4 imobiledevice-tools-1.2.0-7.31 libimobiledevice libimobiledevice-1_0-6-1.3.0+190git.20230705-160000.2.2 libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 libimobiledevice-devel-1.2.0-3.4 libimobiledevice-devel-1.2.0-7.31 libimobiledevice-doc-1.2.0-3.4 libimobiledevice-tools libimobiledevice2 libimobiledevice6 libimobiledevice6-1.2.0+git20170122.45fda81-1.44 libimobiledevice6-1.2.0+git20170122.45fda81-lp150.1.14 libimobiledevice6-1.2.0-3.4 libimobiledevice6-1.2.0-7.31 libimobiledevice6-32bit-1.2.0-3.4 python-imobiledevice-1.2.0-3.4 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP2 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP2 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP3 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP3 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP4 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Desktop 12 SP4 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libimobiledevice6-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libimobiledevice6-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP1 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server 12 SP2 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server 12 SP3 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server 12 SP4 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server 12 SP5 libimobiledevice-1_0-6-1.3.0+190git.20230705-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 libimobiledevice6-1.2.0-7.31 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libimobiledevice-devel-1.2.0-7.31 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libimobiledevice-devel-1.2.0-7.31 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libimobiledevice-devel-1.2.0-7.31 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libimobiledevice-devel-1.2.0-7.31 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Workstation Extension 12 SP2 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Workstation Extension 12 SP3 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Workstation Extension 12 SP4 imobiledevice-tools-1.2.0-7.31 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Workstation Extension 15 imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 as a component of SUSE Linux Enterprise Workstation Extension 15 SP1 libimobiledevice6-1.2.0+git20170122.45fda81-lp150.1.14 as a component of openSUSE Leap 15.0 imobiledevice-tools-1.2.0-3.4 as a component of openSUSE Tumbleweed libimobiledevice-devel-1.2.0-3.4 as a component of openSUSE Tumbleweed libimobiledevice-doc-1.2.0-3.4 as a component of openSUSE Tumbleweed libimobiledevice6-1.2.0-3.4 as a component of openSUSE Tumbleweed libimobiledevice6-32bit-1.2.0-3.4 as a component of openSUSE Tumbleweed python-imobiledevice-1.2.0-3.4 as a component of openSUSE Tumbleweed libimobiledevice6 as a component of HPE Helion OpenStack 8 libimobiledevice as a component of HPE Helion OpenStack 8 libimobiledevice-tools as a component of SUSE Linux Enterprise Desktop 11 SP2 libimobiledevice2 as a component of SUSE Linux Enterprise Desktop 11 SP2 libimobiledevice as a component of SUSE Linux Enterprise Desktop 11 SP2 libimobiledevice-tools as a component of SUSE Linux Enterprise Desktop 11 SP3 libimobiledevice2 as a component of SUSE Linux Enterprise Desktop 11 SP3 libimobiledevice as a component of SUSE Linux Enterprise Desktop 11 SP3 libimobiledevice as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP2-BCL libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP3-BCL libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP3-BCL libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP3-ESPOS libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP3-LTSS libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libimobiledevice6 as a component of SUSE Linux Enterprise Server 12 SP5 libimobiledevice as a component of SUSE Linux Enterprise Server 12 SP5 libimobiledevice as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libimobiledevice6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libimobiledevice as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 libimobiledevice6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libimobiledevice as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libimobiledevice as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 imobiledevice-tools as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libimobiledevice as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libimobiledevice6 as a component of SUSE OpenStack Cloud 8 libimobiledevice as a component of SUSE OpenStack Cloud 8 libimobiledevice6 as a component of SUSE OpenStack Cloud 9 libimobiledevice as a component of SUSE OpenStack Cloud 9 libimobiledevice6 as a component of SUSE OpenStack Cloud Crowbar 8 libimobiledevice as a component of SUSE OpenStack Cloud Crowbar 8 libimobiledevice6 as a component of SUSE OpenStack Cloud Crowbar 9 libimobiledevice as a component of SUSE OpenStack Cloud Crowbar 9 userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pem, or (5) RootPrivateKey.pem in /tmp/root/.config/libimobiledevice/. CVE-2013-2142 SUSE Linux Enterprise Desktop 12 SP2:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Desktop 12 SP2:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Desktop 12 SP3:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Desktop 12 SP3:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Desktop 12 SP4:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Desktop 12 SP4:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise High Performance Computing 12 SP5:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Module for Desktop Applications 15:libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 SUSE Linux Enterprise Module for Desktop Applications 15:libimobiledevice6-1.2.0+git20170122.45fda81-1.44 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libimobiledevice-devel-1.2.0+git20170122.45fda81-1.44 SUSE Linux Enterprise Module for Desktop Applications 15 SP1:libimobiledevice6-1.2.0+git20170122.45fda81-1.44 SUSE Linux Enterprise Server 12 SP2:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Server 12 SP3:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Server 12 SP4:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Server 12 SP5:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Server 16.0:libimobiledevice-1_0-6-1.3.0+190git.20230705-160000.2.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libimobiledevice6-1.2.0-7.31 SUSE Linux Enterprise Software Development Kit 12 SP2:libimobiledevice-devel-1.2.0-7.31 SUSE Linux Enterprise Software Development Kit 12 SP3:libimobiledevice-devel-1.2.0-7.31 SUSE Linux Enterprise Software Development Kit 12 SP4:libimobiledevice-devel-1.2.0-7.31 SUSE Linux Enterprise Software Development Kit 12 SP5:libimobiledevice-devel-1.2.0-7.31 SUSE Linux Enterprise Workstation Extension 12 SP2:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Workstation Extension 12 SP3:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Workstation Extension 12 SP4:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Workstation Extension 12 SP5:imobiledevice-tools-1.2.0-7.31 SUSE Linux Enterprise Workstation Extension 15:imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 SUSE Linux Enterprise Workstation Extension 15 SP1:imobiledevice-tools-1.2.0+git20170122.45fda81-1.44 openSUSE Leap 15.0:libimobiledevice6-1.2.0+git20170122.45fda81-lp150.1.14 openSUSE Tumbleweed:imobiledevice-tools-1.2.0-3.4 openSUSE Tumbleweed:libimobiledevice-devel-1.2.0-3.4 openSUSE Tumbleweed:libimobiledevice-doc-1.2.0-3.4 openSUSE Tumbleweed:libimobiledevice6-1.2.0-3.4 openSUSE Tumbleweed:libimobiledevice6-32bit-1.2.0-3.4 openSUSE Tumbleweed:python-imobiledevice-1.2.0-3.4 HPE Helion OpenStack 8:libimobiledevice HPE Helion OpenStack 8:libimobiledevice6 SUSE Linux Enterprise High Performance Computing 12 SP5:libimobiledevice SUSE Linux Enterprise Server 12 SP2-BCL:libimobiledevice SUSE Linux Enterprise Server 12 SP2-BCL:libimobiledevice6 SUSE Linux Enterprise Server 12 SP3-BCL:libimobiledevice SUSE Linux Enterprise Server 12 SP3-BCL:libimobiledevice6 SUSE Linux Enterprise Server 12 SP3-ESPOS:libimobiledevice SUSE Linux Enterprise Server 12 SP3-ESPOS:libimobiledevice6 SUSE Linux Enterprise Server 12 SP3-LTSS:libimobiledevice SUSE Linux Enterprise Server 12 SP3-LTSS:libimobiledevice6 SUSE Linux Enterprise Server 12 SP4-ESPOS:libimobiledevice SUSE Linux Enterprise Server 12 SP4-ESPOS:libimobiledevice6 SUSE Linux Enterprise Server 12 SP4-LTSS:libimobiledevice SUSE Linux Enterprise Server 12 SP4-LTSS:libimobiledevice6 SUSE Linux Enterprise Server 12 SP5:libimobiledevice SUSE Linux Enterprise Server 12 SP5:libimobiledevice6 SUSE Linux Enterprise Server Teradata 12 SP3:libimobiledevice SUSE Linux Enterprise Server for SAP Applications 12 SP3:libimobiledevice SUSE Linux Enterprise Server for SAP Applications 12 SP3:libimobiledevice6 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libimobiledevice SUSE Linux Enterprise Server for SAP Applications 12 SP4:libimobiledevice6 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libimobiledevice SUSE Linux Enterprise Workstation Extension 12 SP5:imobiledevice-tools SUSE Linux Enterprise Workstation Extension 12 SP5:libimobiledevice SUSE OpenStack Cloud 8:libimobiledevice SUSE OpenStack Cloud 8:libimobiledevice6 SUSE OpenStack Cloud 9:libimobiledevice SUSE OpenStack Cloud 9:libimobiledevice6 SUSE OpenStack Cloud Crowbar 8:libimobiledevice SUSE OpenStack Cloud Crowbar 8:libimobiledevice6 SUSE OpenStack Cloud Crowbar 9:libimobiledevice SUSE OpenStack Cloud Crowbar 9:libimobiledevice6 low 3.3 AV:L/AC:M/Au:N/C:N/I:P/A:P