Low severity3.3NVD Advisory· Published Nov 30, 2020· Updated Jun 17, 2026
CVE-2020-11867
CVE-2020-11867
Description
Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:audacityteam:audacity:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:audacityteam:audacity:*:*:*:*:*:*:*:*range: <=2.3.3
- (no CPE)range: <=2.3.3
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- Audacity/Audacitydescription
- osv-coords4 versionspkg:rpm/opensuse/audacity&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/audacity&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/audacity&distro=SUSE%20Package%20Hub%2015%20SP1pkg:rpm/suse/audacity&distro=SUSE%20Package%20Hub%2015%20SP2
< 2.2.2-bp152.4.3.1+ 3 more
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
- (no CPE)range: < 2.2.2-bp152.4.3.1
Patches
Vulnerability mechanics
References
4- github.com/audacity/audacity/releasesnvdRelease NotesThird Party Advisory
- salvatoresecurity.com/the-many-perils-of-tmp/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/nvd
News mentions
0No linked articles in our index yet.