Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-8016

Опубликовано: 02 апр. 2020
Источник: nvd
CVSS3: 4.9
CVSS3: 7
CVSS2: 4.4
EPSS Низкий

Описание

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:opensuse:texlive-filesystem:*:*:*:*:*:*:*:*
Версия до 2017.135-9.5.1 (исключая)
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp1:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:opensuse:texlive-filesystem:*:*:*:*:*:*:*:*
Версия до 2013.74-16.5.1 (исключая)
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp4:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:a:opensuse:texlive-filesystem:*:*:*:*:*:*:*:*
Версия до 2013.74-16.5.1 (исключая)
cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp5:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:a:opensuse:texlive-filesystem:-:*:*:*:*:*:*:*
cpe:2.3:o:suse:linux_enterprise_desktop:15:-:*:*:*:*:*:*
Конфигурация 5

Одновременно

cpe:2.3:a:opensuse:texlive-filesystem:*:*:*:*:*:*:*:*
Версия до 2017.135-lp151.8.3.1 (исключая)
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00094
Низкий

4.9 Medium

CVSS3

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-367
CWE-367

Связанные уязвимости

CVSS3: 4.9
ubuntu
почти 6 лет назад

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS3: 7
github
больше 3 лет назад

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

suse-cvrf
больше 5 лет назад

Security update for texlive-filesystem

suse-cvrf
больше 5 лет назад

Security update for texlive

suse-cvrf
больше 5 лет назад

Security update for texlive-filesystem

EPSS

Процентиль: 27%
0.00094
Низкий

4.9 Medium

CVSS3

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-367
CWE-367