Name: CVE-2020-8017: Time-of-check Time-of-use (TOCTOU) Race Condition
Creator: Rapid7
Published: 2020-04-02T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-8017, CWE-367, CVSS 6.2, EPSS 0.00023

A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.

CVSS Details

CVSS 3.1 Base Score: 6.2
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Suse	—	Upgrade texlive-splitindex-binUpgrade texlive-context-binUpgrade texlive-mptopdf-binUpgrade texlive-texlua-develUpgrade texlive-csplain-binUpgrade texlive-make4ht-binUpgrade texlive-mkgrkindex-binUpgrade texlive-ttfutils-binUpgrade texlive-latex-papersize-binUpgrade texlive-ptexenc-develUpgrade texlive-filesystemUpgrade texlive-rubik-binUpgrade texlive-fontinst-binUpgrade texlive-glossaries-binUpgrade texlive-latexindent-binUpgrade texlive-pdftex-binUpgrade texlive-latexmk-binUpgrade texlive-pstools-binUpgrade texlive-tetex-binUpgrade texlive-xdvi-binUpgrade texlive-extratoolsUpgrade texlive-omegaware-binUpgrade texlive-authorindex-binUpgrade texlive-pax-binUpgrade texlive-scheme-contextUpgrade texlive-tex-binUpgrade texlive-collection-luatexUpgrade texlive-cyrillic-bin-binUpgrade texlive-collection-latexUpgrade texlive-autosp-binUpgrade texlive-texosquery-binUpgrade texlive-getmap-binUpgrade texlive-arara-binUpgrade texlive-exceltex-binUpgrade texlive-mflua-binUpgrade texlive-collection-plaingenericUpgrade texlive-collection-langfrenchUpgrade texliveUpgrade texlive-de-macro-binUpgrade texlive-scheme-minimalUpgrade texlive-bibtex-binUpgrade texlive-ltxfileinfo-binUpgrade texlive-collection-contextUpgrade texlive-ltximg-binUpgrade texlive-ebong-binUpgrade texlive-pedigree-perl-binUpgrade texlive-bibtex8-binUpgrade texlive-bibexport-binUpgrade texlive-collection-langczechslovakUpgrade texlive-m-tx-binUpgrade texlive-patgen-binUpgrade texlive-collection-langotherUpgrade texlive-collection-latexextraUpgrade texlive-scheme-mediumUpgrade texlive-biber-binUpgrade texlive-jadetex-binUpgrade texlive-mathspic-binUpgrade texlive-synctex-binUpgrade texlive-collection-langcjkUpgrade texlive-ctanupload-binUpgrade texlive-texware-binUpgrade texlive-vpe-binUpgrade texlive-texcount-binUpgrade texlive-vlna-binUpgrade texlive-velthuis-binUpgrade texlive-mkpic-binUpgrade texlive-ptex2pdf-binUpgrade texlive-seetexk-binUpgrade texlive-scheme-gustUpgrade texlive-dvips-binUpgrade texlive-lacheck-binUpgrade texlive-texfot-binUpgrade texlive-texluajit-develUpgrade texlive-typeoutfileinfo-binUpgrade texlive-dvipos-binUpgrade texlive-texsis-binUpgrade texlive-pdfcrop-binUpgrade texlive-epstopdf-binUpgrade texlive-cjk-gs-integrate-binUpgrade texlive-accfonts-binUpgrade texlive-collection-picturesUpgrade texlive-dvipng-binUpgrade texlive-fragmaster-binUpgrade texlive-luaotfload-binUpgrade texlive-cweb-binUpgrade texlive-purifyeps-binUpgrade texlive-web-binUpgrade texlive-platex-binUpgrade texlive-thumbpdf-binUpgrade texlive-musixtnt-binUpgrade texlive-collection-langpolishUpgrade texlive-petri-nets-binUpgrade texlive-match_parens-binUpgrade texlive-dviasm-binUpgrade texlive-listbib-binUpgrade texlive-mfware-binUpgrade texlive-pdfbook2-binUpgrade texlive-kotex-utils-binUpgrade texlive-collection-basicUpgrade texlive-scheme-infraonlyUpgrade texlive-collection-pstricksUpgrade texlive-a2ping-binUpgrade texlive-dosepsbin-binUpgrade texlive-urlbst-binUpgrade texlive-lwarp-binUpgrade texlive-tie-binUpgrade texlive-pdfxup-binUpgrade texlive-perltex-binUpgrade texlive-bin-develUpgrade texlive-makeindex-binUpgrade texlive-pythontex-binUpgrade texlive-makedtx-binUpgrade texlive-dviinfox-binUpgrade texlive-collection-langenglishUpgrade texlive-mltex-binUpgrade texlive-chktex-binUpgrade texlive-collection-langgermanUpgrade texlive-lollipop-binUpgrade libtexluajit2Upgrade texlive-collection-musicUpgrade libsynctex1Upgrade texlive-ulqda-binUpgrade texlive-scheme-fullUpgrade texlive-collection-fontsrecommendedUpgrade texlive-collection-bibtexextraUpgrade texlive-collection-mathscienceUpgrade texlive-collection-langcyrillicUpgrade texlive-dvisvgm-binUpgrade texlive-pygmentex-binUpgrade texlive-synctex-develUpgrade texlive-latexpand-binUpgrade texlive-ps2pk-binUpgrade texlive-lilyglyphs-binUpgrade texlive-checklistings-binUpgrade texlive-latex2man-binUpgrade texlive-findhyph-binUpgrade texlive-collection-langspanishUpgrade texlive-collection-fontsextraUpgrade texlive-pmx-binUpgrade texlive-texdiff-binUpgrade texlive-pdfjam-binUpgrade texlive-latexdiff-binUpgrade texlive-tex4ebook-binUpgrade texlive-gsftopk-binUpgrade texlive-bundledoc-binUpgrade texlive-lua2dox-binUpgrade texlive-collection-binextraUpgrade texlive-cjkutils-binUpgrade texlive-srcredact-binUpgrade texlive-fontools-binUpgrade texlive-latex2nemeth-binUpgrade texlive-collection-formatsextraUpgrade texlive-ctie-binUpgrade texlive-pmxchords-binUpgrade texlive-pst2pdf-binUpgrade texlive-scheme-tetexUpgrade texlive-crossrefware-binUpgrade texlive-collection-humanitiesUpgrade texlive-texliveonfly-binUpgrade texlive-lcdftypetools-binUpgrade texlive-pfarrei-binUpgrade texlive-luatex-binUpgrade texlive-latexfileversion-binUpgrade texlive-fig4latex-binUpgrade texlive-diadia-binUpgrade texlive-mex-binUpgrade texlive-collection-langarabicUpgrade perl-biberUpgrade libtexlua52-5Upgrade texlive-aleph-binUpgrade texlive-listings-ext-binUpgrade texlive-pkfix-binUpgrade texlive-mkjobtexmf-binUpgrade texlive-pst-pdf-binUpgrade texlive-tex4ht-binUpgrade texlive-latex-git-log-binUpgrade texlive-collection-xetexUpgrade texlive-collection-publishersUpgrade texlive-scheme-basicUpgrade texlive-svn-multi-binUpgrade texlive-xmltex-binUpgrade texlive-cslatex-binUpgrade texlive-gregoriotex-binUpgrade texlive-collection-htmlxmlUpgrade texlive-detex-binUpgrade texlive-collection-langgreekUpgrade texlive-dvipdfmx-binUpgrade texlive-uptex-binUpgrade texlive-afm2pl-binUpgrade texlive-tpic2pdftex-binUpgrade texlive-dtxgen-binUpgrade texlive-collection-fontutilsUpgrade texlive-adhocfilelist-binUpgrade texlive-pdflatexpicscale-binUpgrade texlive-mf2pt1-binUpgrade texlive-ptex-binUpgrade texlive-pdftools-binUpgrade texlive-metafont-binUpgrade texlive-ctanify-binUpgrade texlive-latex-bin-binUpgrade texlive-kpathsea-develUpgrade texlive-metapost-binUpgrade texlive-dvidvi-binUpgrade texlive-texdirflatten-binUpgrade texlive-epspdf-binUpgrade texlive-texconfig-binUpgrade texlive-fontware-binUpgrade texlive-checkcites-binUpgrade texlive-eplain-binUpgrade texlive-collection-langeuropeanUpgrade texlive-cachepic-binUpgrade texlive-collection-langchineseUpgrade texlive-collection-langitalianUpgrade texlive-pkfix-helper-binUpgrade texlive-musixtex-binUpgrade texlive-collection-langjapaneseUpgrade texlive-collection-langkoreanUpgrade libkpathsea6Upgrade texlive-yplan-binUpgrade texlive-sty2dtx-binUpgrade texlive-texdoc-binUpgrade texlive-texdef-binUpgrade texlive-bibtexu-binUpgrade texlive-collection-gamesUpgrade texlive-asymptote-binUpgrade texlive-amstex-binUpgrade libptexenc1Upgrade texlive-dvicopy-binUpgrade texlive-dtl-binUpgrade texlive-multibibliography-binUpgrade texlive-xetex-binUpgrade texlive-collection-latexrecommendedUpgrade texlive-texloganalyser-binUpgrade texlive-dviljk-binUpgrade texlive-ptex-fontmaps-binUpgrade texlive-collection-langportugueseUpgrade texlive-collection-metapostUpgrade texlive-uplatex-binUpgrade texlive-kpathsea-binUpgrade texlive-scheme-smallUpgrade texlive-develUpgrade texlive-convbkmk-bin	Jun 10, 2020	Apr 2, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence