Log in Start free

Vulnerability · Published Apr 30, 2020 · Assigned by mitre

CVE-2020-12050

High 7.0

In plain English

A high-severity security flaw in the sqliteodbc package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).

Severity (CVSS NVD)7.0High
Exploit odds (30 days)0.3%top 76.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12sqliteodbcno fix listedDEBIAN-CVE-2020-12050
Debian:13sqliteodbcno fix listedDEBIAN-CVE-2020-12050
Debian:14sqliteodbcno fix listedDEBIAN-CVE-2020-12050
Ubuntu:22.04:LTSsqliteodbcno fix listedUBUNTU-CVE-2020-12050
Ubuntu:24.04:LTSsqliteodbcno fix listedUBUNTU-CVE-2020-12050
Ubuntu:25.10sqliteodbcno fix listedUBUNTU-CVE-2020-12050
Ubuntu:26.04:LTSsqliteodbcno fix listedUBUNTU-CVE-2020-12050
Ubuntu:26.10sqliteodbcno fix listedUBUNTU-CVE-2020-12050

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References