The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks. https://nvd.nist.gov/vuln/detail/CVE-2015-5224