CVE-2013-0296

CVE-2013-0296 describes a race condition in pigz versions prior to 2.2.5, affecting the zlib pigz product. This vulnerability allows local users to bypass intended file access permissions during the compression process due to pigz initially using umask-derived permissions before applying the original file's permissions. With a CVSS score of 4.4, it presents a medium attack complexity and potential for partial confidentiality, integrity, and availability impact if exploited locally. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.