CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

PT-2020-13015

Name of the Vulnerable Software and Affected Versions SQLiteODBC version 0.9996 Description The issue is related to a race condition that can lead to root privilege escalation. This occurs because any user can replace a /tmp/sqliteodbc$$ file with new contents, causing the loading of an arbitrary...

CVE-2020-12242

Valve Source allows local users to gain privileges by writing to the /tmp/hl2relaunch file, which is later executed in the context of a different user account...

Design/Logic Flaw

Valve Source allows local users to gain privileges by writing to the /tmp/hl2relaunch file, which is later executed in the context of a different user account...

CVE-2020-12242

Valve Source allows local users to gain privileges by writing to the /tmp/hl2relaunch file, which is later executed in the context of a different user account...

CVE-2020-12242

CVE-2020-12242 affects Valve Source Engine (Valve) where a local attacker can gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different user account. Public references in connected documents indicate exploitation against Source Engine CS:GO Bu...

PT-2020-13068

Name of the Vulnerable Software and Affected Versions Valve Source affected versions not specified Description The issue allows local users to gain privileges by writing to the /tmp/hl2 relaunch file, which is later executed in the context of a different user account. Recommendations At the momen...

CVE-2020-12242: Improper Neutralization of Special Elements used in an OS Command

Valve Source allows local users to gain privileges by writing to the /tmp/hl2relaunch file, which is later executed in the context of a different user account...

Unspecified Vulnerability in GitLab (CNVD-2020-25736)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...

ansible: insecure temporary directory when running become_user from become directive

A race condition flaw was found in Ansible Engine when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask 77 && mkdir -p "; this operation does not fail if...

PT-2020-21606

Name of the Vulnerable Software and Affected Versions gnuhealth affected versions not specified Description The issue involves a local privilege escalation in gnuhealth-control due to the use of static tmp files and HTTP transport. Additionally, there is a local Denial of Service DoS vulnerabilit...

Arbitrary Code Execution

policycoreutils is vulnerable to arbitrary code execution. The vulnerability exists as it was discovered that the seunshare utility did not enforce proper file permissions on the directory used as an alternate temporary directory mounted as /tmp/. A local user could use this flaw to overwrite fil...

PT-2020-21604

Name of the Vulnerable Software and Affected Versions gnuhealth affected versions not specified Description The issue concerns a local privilege escalation in gnuhealth-control due to the use of static tmp files and HTTP transport. Additionally, there is a local Denial of Service DoS issue in the...

cups security and bug fix update

1:1.6.3-43 - 1687571 - cupsd doesnt clean tmp files if client conn is terminated abnormally 1:1.6.3-42 - 1651575 - CVE-2018-4700 cups 1:1.6.3-41 - 1608764 - CVE-2018-4180 cups - 1607291 - CVE-2018-4181 cups...

ALPINE-CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

CVE-2020-1733

A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansible needs to run a module with become user, the temporary directory is created in /var/tmp. This directory is created with "umask...

PT-2020-6579

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.17 and prior Ansible Engine versions 2.8.9 and prior Ansible Engine versions 2.9.6 and prior Description The issue is related to a race condition flaw in Ansible Engine when running a playbook with an unprivileged...