Log in Start free

Vulnerability · Published Apr 2, 2020 · Assigned by suse

CVE-2020-8016race condition in the packaging of texlive-filesysten

Medium 4.9

In plain English

A medium-severity security flaw in openSUSE Leap 15.1 from openSUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

Affected products (as reported)

VendorProductVersions
SUSE SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem – before 2017.135-9.5.1
SUSE SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem – before 2013.74-16.5.1
SUSE SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem – before 2013.74-16.5.1
openSUSE openSUSE Leap 15.1 texlive-filesystem – before 2017.135-lp151.8.3.1

Weakness: CWE-367 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References