The vulnerability of the init_tmp function (TeeJee.FileSystem.vala) in the Timeshift system recovery application, which allows a hacker to execute arbitrary code.

The vulnerability of the inittmp function TeeJee.FileSystem.vala in the Timeshift system recovery application is caused by synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2020-10174

inittmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this...

CVE-2020-10174: Improper Link Resolution Before File Access

inittmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this...