Unrated severityNVD Advisory· Published Nov 30, 2020· Updated Aug 4, 2024
CVE-2020-11867
CVE-2020-11867
Description
Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- Audacity/Audacitydescription
- Range: <=2.3.3
- osv-coords4 versionspkg:rpm/opensuse/audacity&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/audacity&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/audacity&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/audacity&distro=SUSE%20Package%20Hub%2015%20SP2
< 2.2.2-bp152.4.3.1+ 3 more
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
Patches
Vulnerability mechanics
References
4- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/mitrevendor-advisoryx_refsource_FEDORA
- github.com/audacity/audacity/releasesmitrex_refsource_MISC
- salvatoresecurity.com/the-many-perils-of-tmp/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.