Linux Distros Unpatched Vulnerability : CVE-2020-25860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time- of-Use vulnerability, where signature verification on ...

CVE-2020-25860

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is...

CVE-2020-25860

creationtimestamp| type| source ---|---|--- 2020-12-28 23:39:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2348...

CVE-2020-25860

The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is...

CVE-2020-25860

The CVE-2020-25860 issue affects the Pengutronix RAUC update client, specifically the install.c module in versions prior to 1.5. The vulnerability is a Time-of-Check Time-of-Use flaw where signature verification on an update file occurs before reopening it for installation. An attacker who can mo...