Race Condition in pigz Affecting File Compression Processes from Vendor

CVE-2013-0296

What is CVE-2013-0296?

A race condition vulnerability exists in pigz, prior to version 2.2.5, where it improperly handles file permissions during the compression process. As files are being compressed, the permissions intended for these files can be altered, which may allow local users to bypass the established access permissions. This behavior poses a risk as unauthorized users could gain unintended access to sensitive information while compression tasks are ongoing.

References