CVE-2020-8016 — MEDIUM (4.9)

Q: How severe is CVE-2020-8016?

CVE-2020-8016 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-8016?

Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Texlive-Filesystem, Suse Linux Enterprise Desktop, Suse Linux Enterprise Software Development Kit, Opensuse Leap.

Vulnerability Description

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Opensuse	Texlive-Filesystem	< 2017.135-9.5.1
Suse	Linux Enterprise Desktop	15
Suse	Linux Enterprise Software Development Kit	12
Opensuse	Leap	15.1

Related Weaknesses (CWE)

CWE-367

References

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.htmlMailing ListThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1159740ExploitIssue TrackingVendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.htmlMailing ListThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1159740ExploitIssue TrackingVendor Advisory

FAQ

What is CVE-2020-8016?

CVE-2020-8016 is a vulnerability with a CVSS score of 4.9 (MEDIUM). A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Developmen...

How severe is CVE-2020-8016?

CVE-2020-8016 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-8016?

Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Texlive-Filesystem, Suse Linux Enterprise Desktop, Suse Linux Enterprise Software Development Kit, Opensuse Leap.