EUVD-2020-4207

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Audacity saves temporary files to /var/tmp/audacity-$USER with permissions allowing public access.

Reporter	Title	Published	Views	Family All 29
AstraLinux	Astra Linux - уязвимость в audacity	3 May 202623:59	–	astralinux
Circl	CVE-2020-11867	1 Dec 202000:53	–	circl
CNNVD	Audacity Security Breach	30 Nov 202000:00	–	cnnvd
CVE	CVE-2020-11867	30 Nov 202021:21	–	cve
Cvelist	CVE-2020-11867	30 Nov 202021:21	–	cvelist
Debian CVE	CVE-2020-11867	30 Nov 202021:21	–	debiancve
Fedora	[SECURITY] Fedora 33 Update: audacity-2.4.2-4.fc33	15 Feb 202101:32	–	fedora
Fedora	[SECURITY] Fedora 34 Update: audacity-3.0.2-3.fc34	22 Jun 202101:02	–	fedora
Tenable Nessus	Fedora 33 : audacity (2021-8aaccdbb5f)	16 Feb 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : audacity (openSUSE-2020-2261)	25 Jan 202100:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "dbc9fb8c-2bdd-3667-80d7-89e31ccc3c0e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a11415b5-29f9-3503-9672-f04d589e2ef8",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2020-11867.html
advisories	www.advisories.mageia.org/CVE-2020-11867.html
security	www.security.archlinux.org/CVE-2020-11867
github	www.github.com/audacity/audacity/releases
salvatoresecurity	www.salvatoresecurity.com/the-many-perils-of-tmp/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

3.9Low risk

Vulners AI Score3.9

CVSS 3.13.3

CVSS 22.1

EPSS0.00118