CVE-2020-10174

inittmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this...

PT-2020-2777

Name of the Vulnerable Software and Affected Versions Timeshift versions prior to 20.03 Description The issue is caused by errors in synchronization when using a shared resource in the init tmp function of TeeJee.FileSystem.vala in Timeshift. This allows an attacker to execute arbitrary code by...

CVE-2020-10174: Improper Link Resolution Before File Access

inittmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this...