Name: CVE-2020-8016: Time-of-check Time-of-use (TOCTOU) Race Condition
Creator: Rapid7
Published: 2020-04-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-8016, CWE-367, CVSS 4.9, EPSS 0.00094

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS Details

CVSS 3.1 Base Score: 4.9
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Suse	—	Upgrade texlive-getmap-binUpgrade texlive-texware-binUpgrade texlive-velthuis-binUpgrade texlive-collection-mathscienceUpgrade texlive-texdoc-binUpgrade texlive-lcdftypetools-binUpgrade texlive-latex2nemeth-binUpgrade texlive-dviasm-binUpgrade texlive-xmltex-binUpgrade texlive-texosquery-binUpgrade texlive-listings-ext-binUpgrade texlive-collection-contextUpgrade texlive-epspdf-binUpgrade texlive-scheme-fullUpgrade texlive-checkcites-binUpgrade texlive-vpe-binUpgrade texlive-afm2pl-binUpgrade texlive-collection-langotherUpgrade texlive-multibibliography-binUpgrade texlive-ltxfileinfo-binUpgrade texlive-yplan-binUpgrade texlive-uplatex-binUpgrade texlive-sty2dtx-binUpgrade texlive-texdirflatten-binUpgrade texlive-cslatex-binUpgrade texlive-texlua-develUpgrade texlive-pmxchords-binUpgrade texlive-svn-multi-binUpgrade texlive-fontinst-binUpgrade texlive-scheme-basicUpgrade texlive-uptex-binUpgrade texlive-pedigree-perl-binUpgrade texlive-makeindex-binUpgrade texlive-web-binUpgrade texlive-detex-binUpgrade texlive-de-macro-binUpgrade texlive-ttfutils-binUpgrade texlive-collection-langkoreanUpgrade texlive-collection-langspanishUpgrade texlive-metafont-binUpgrade texlive-collection-langitalianUpgrade texlive-aleph-binUpgrade texlive-dtxgen-binUpgrade texlive-gsftopk-binUpgrade libkpathsea6Upgrade texlive-ps2pk-binUpgrade texlive-amstex-binUpgrade texlive-texliveonfly-binUpgrade texlive-fig4latex-binUpgrade texlive-latexpand-binUpgrade texlive-checklistings-binUpgrade texlive-dtl-binUpgrade texlive-scheme-tetexUpgrade texlive-fontools-binUpgrade texlive-gregoriotex-binUpgrade texlive-accfonts-binUpgrade texlive-ebong-binUpgrade texlive-musixtex-binUpgrade texlive-latex2man-binUpgrade texlive-texconfig-binUpgrade texlive-ptex-binUpgrade texlive-texsis-binUpgrade texlive-synctex-develUpgrade libsynctex1Upgrade texlive-pfarrei-binUpgrade texlive-latexmk-binUpgrade texlive-musixtnt-binUpgrade texlive-cweb-binUpgrade texlive-ulqda-binUpgrade texlive-splitindex-binUpgrade texlive-texdiff-binUpgrade texlive-mltex-binUpgrade libptexenc1Upgrade texlive-latex-bin-binUpgrade texlive-bundledoc-binUpgrade texlive-mptopdf-binUpgrade texlive-asymptote-binUpgrade texlive-fontware-binUpgrade texlive-ctanify-binUpgrade texlive-mfware-binUpgrade texlive-mathspic-binUpgrade texlive-dvisvgm-binUpgrade texlive-dvipdfmx-binUpgrade perl-biberUpgrade texlive-pdftools-binUpgrade texlive-collection-latexrecommendedUpgrade texlive-pdfxup-binUpgrade texlive-collection-metapostUpgrade texlive-tie-binUpgrade texlive-latexindent-binUpgrade texlive-latexdiff-binUpgrade texlive-scheme-smallUpgrade texlive-pst-pdf-binUpgrade texlive-kpathsea-develUpgrade texlive-scheme-mediumUpgrade texlive-collection-latexUpgrade texlive-biber-binUpgrade texlive-autosp-binUpgrade texlive-collection-publishersUpgrade texlive-collection-formatsextraUpgrade texlive-bin-develUpgrade texlive-collection-gamesUpgrade texlive-collection-binextraUpgrade texlive-collection-langpolishUpgrade texlive-collection-fontsrecommendedUpgrade texlive-latexfileversion-binUpgrade texlive-mflua-binUpgrade texlive-lwarp-binUpgrade texlive-luaotfload-binUpgrade texlive-jadetex-binUpgrade texlive-pmx-binUpgrade texlive-tpic2pdftex-binUpgrade texlive-xdvi-binUpgrade texlive-metapost-binUpgrade texlive-pdfjam-binUpgrade texlive-collection-langgermanUpgrade texlive-dvips-binUpgrade texlive-cjkutils-binUpgrade texlive-match_parens-binUpgrade texlive-xetex-binUpgrade texliveUpgrade texlive-collection-langeuropeanUpgrade texlive-collection-humanitiesUpgrade texlive-seetexk-binUpgrade texlive-pax-binUpgrade texlive-kpathsea-binUpgrade texlive-texfot-binUpgrade texlive-pdftex-binUpgrade texlive-kotex-utils-binUpgrade texlive-collection-luatexUpgrade texlive-cjk-gs-integrate-binUpgrade texlive-urlbst-binUpgrade texlive-collection-langcjkUpgrade texlive-chktex-binUpgrade texlive-mf2pt1-binUpgrade texlive-collection-fontutilsUpgrade texlive-pygmentex-binUpgrade texlive-bibtex8-binUpgrade texlive-collection-xetexUpgrade texlive-collection-langchineseUpgrade texlive-ctie-binUpgrade texlive-bibtex-binUpgrade texlive-texdef-binUpgrade texlive-collection-plaingenericUpgrade texlive-scheme-infraonlyUpgrade texlive-collection-htmlxmlUpgrade texlive-makedtx-binUpgrade texlive-collection-langarabicUpgrade texlive-bibtexu-binUpgrade texlive-exceltex-binUpgrade texlive-extratoolsUpgrade texlive-collection-langfrenchUpgrade texlive-ptexenc-develUpgrade texlive-tetex-binUpgrade texlive-pstools-binUpgrade texlive-arara-binUpgrade texlive-synctex-binUpgrade texlive-collection-fontsextraUpgrade texlive-collection-langjapaneseUpgrade texlive-dvidvi-binUpgrade texlive-texloganalyser-binUpgrade texlive-pst2pdf-binUpgrade texlive-vlna-binUpgrade texlive-lua2dox-binUpgrade texlive-lollipop-binUpgrade texlive-collection-langczechslovakUpgrade texlive-collection-latexextraUpgrade texlive-collection-langenglishUpgrade texlive-dvipng-binUpgrade texlive-perltex-binUpgrade texlive-filesystemUpgrade texlive-develUpgrade texlive-pythontex-binUpgrade texlive-thumbpdf-binUpgrade texlive-cyrillic-bin-binUpgrade texlive-mex-binUpgrade texlive-collection-picturesUpgrade texlive-fragmaster-binUpgrade texlive-diadia-binUpgrade texlive-findhyph-binUpgrade texlive-omegaware-binUpgrade texlive-convbkmk-binUpgrade texlive-texluajit-develUpgrade texlive-tex4ht-binUpgrade texlive-scheme-gustUpgrade texlive-rubik-binUpgrade texlive-eplain-binUpgrade texlive-context-binUpgrade texlive-authorindex-binUpgrade texlive-collection-pstricksUpgrade texlive-tex4ebook-binUpgrade texlive-pdflatexpicscale-binUpgrade texlive-srcredact-binUpgrade texlive-collection-basicUpgrade texlive-cachepic-binUpgrade texlive-dosepsbin-binUpgrade texlive-lilyglyphs-binUpgrade texlive-typeoutfileinfo-binUpgrade texlive-luatex-binUpgrade texlive-listbib-binUpgrade texlive-dvipos-binUpgrade texlive-pkfix-binUpgrade texlive-glossaries-binUpgrade texlive-make4ht-binUpgrade texlive-ptex2pdf-binUpgrade texlive-petri-nets-binUpgrade libtexlua52-5Upgrade texlive-collection-langcyrillicUpgrade texlive-m-tx-binUpgrade texlive-platex-binUpgrade texlive-a2ping-binUpgrade texlive-epstopdf-binUpgrade texlive-bibexport-binUpgrade texlive-scheme-minimalUpgrade texlive-csplain-binUpgrade texlive-ptex-fontmaps-binUpgrade texlive-dvicopy-binUpgrade texlive-pkfix-helper-binUpgrade texlive-collection-bibtexextraUpgrade texlive-texcount-binUpgrade texlive-mkjobtexmf-binUpgrade texlive-dviljk-binUpgrade texlive-dviinfox-binUpgrade texlive-scheme-contextUpgrade texlive-collection-langportugueseUpgrade texlive-mkpic-binUpgrade texlive-collection-musicUpgrade texlive-ctanupload-binUpgrade texlive-lacheck-binUpgrade texlive-adhocfilelist-binUpgrade texlive-ltximg-binUpgrade libtexluajit2Upgrade texlive-crossrefware-binUpgrade texlive-patgen-binUpgrade texlive-purifyeps-binUpgrade texlive-mkgrkindex-binUpgrade texlive-latex-papersize-binUpgrade texlive-collection-langgreekUpgrade texlive-pdfbook2-binUpgrade texlive-pdfcrop-binUpgrade texlive-tex-binUpgrade texlive-latex-git-log-bin	Jun 10, 2020	Apr 2, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence