Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-8017
HistoryApr 02, 2020 - 2:15 p.m.

CVE-2020-8017

2020-04-0214:15:15
CWE-367
[email protected]
web.nvd.nist.gov
1

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

6.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

Affected configurations

NVD
Node
opensusetexlive-filesystemRange<2017.135-9.5.1
AND
suselinux_enterprise_desktopMatch15sp1
Node
opensusetexlive-filesystemRange<2013.74-16.5.1
AND
suselinux_enterprise_software_development_kitMatch12sp4
Node
opensusetexlive-filesystemRange<2013.74-16.5.1
AND
suselinux_enterprise_software_development_kitMatch12sp5
Node
opensusetexlive-filesystemMatch-
AND
suselinux_enterprise_desktopMatch15-
Node
opensusetexlive-filesystemRange<2017.135-lp151.8.3.1
AND
opensuseleapMatch15.1
Node
opensuseleapMatch15.1

Related

cve 1
prion 1
cvelist 1
ubuntucve 1
openvas 4
nessus 3
suse 1
cve
cve
CVE-2020-8017
2020-04-02 14:15:15
prion
prion
Race condition
2020-04-02 14:15:00
cvelist
cvelist
CVE-2020-8017 race condition on texlive-filesystem cron job allows for the deletion of unintended files
2020-04-02 00:00:00
ubuntucve
ubuntucve
CVE-2020-8017
2020-04-02 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:1580-2)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:1580-1)
2021-06-09 00:00:00
openSUSE: Security Advisory for texlive-filesystem (openSUSE-SU-2020:0804-1)
2020-06-14 00:00:00
nessus
nessus
SUSE SLES12 Security Update : texlive (SUSE-SU-2020:1581-1)
2020-06-18 00:00:00
openSUSE Security Update : texlive-filesystem (openSUSE-2020-804)
2020-07-20 00:00:00
SUSE SLED15 / SLES15 Security Update : texlive-filesystem (SUSE-SU-2020:1580-1)
2020-06-18 00:00:00
suse
suse
Security update for texlive-filesystem (moderate)
2020-06-13 00:00:00

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

6.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2020-8017
cve1prion1cvelist1ubuntucve1openvas4nessus3suse1