Gnu Nano vulnerabilities

4 vulnerabilities

Known vulnerabilities in Gnu Nano, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.7CVE-2010-1161debiannano+1
EPSS score
0.28%
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.1.9CVE-2010-1160debiannano+1
EPSS score
0.37%
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.6.7CVE-2024-5742debiannano+12
EPSS score
0.34%
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.5.5CVE-2026-6843debiannano+4
EPSS score
0.15%
A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By creating a directory with a name containing `printf` specifiers, the application attempts to display this name, leading to a segmentation fault (SEGV). This results in a Denial of Service (DoS) for the `nano` application.