Уязвимость CVE-2020-12050: Информация
Описание
SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.
Важность: HIGH (7,0) Вектор: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Исправленные пакеты
Имя пакета | Ветка | Исправлено в версии | Версия в репозитории | Errata ID | № Задания | Состояние |
|---|---|---|---|---|---|---|
| sqliteodbc | sisyphus | 0.9996-alt3 | 0.9998-alt1 | ALT-PU-2020-3378-1 | 262189 | Исправлено |
| sqliteodbc | sisyphus_e2k | 0.9998-alt1 | 0.9998-alt1 | ALT-PU-2022-5487-1 | - | Исправлено |
| sqliteodbc | p10 | 0.9996-alt3 | 0.9996-alt3 | ALT-PU-2020-3378-1 | 262189 | Исправлено |
| sqliteodbc | p9 | 0.9996-alt3 | 0.9996-alt3 | ALT-PU-2020-3462-1 | 262190 | Исправлено |
| sqliteodbc | c10f1 | 0.9996-alt3 | 0.9996-alt3 | ALT-PU-2020-3378-1 | 262189 | Исправлено |
| sqliteodbc | p11 | 0.9996-alt3 | 0.9998-alt1 | ALT-PU-2020-3378-1 | 262189 | Исправлено |
Ссылки на рекомендации, решения и инструменты
Ссылка | Ресурс |
|---|---|
| http://www.ch-werner.de/sqliteodbc/ |
|
| https://sysdream.com/news/lab/ |
|
| https://bugzilla.redhat.com/show_bug.cgi?id=1825762 |
|
| openSUSE-SU-2020:0612 |
|
| openSUSE-SU-2020:0628 | |
| https://sysdream.com/news/lab/2020-05-25-cve-2020-12050-fedora-red-hat-centos-local-privilege-escalation-through-a-race-condition-in-the-sqliteodbc-installer-script/ | |
| FEDORA-2020-1e85425a52 | |
| FEDORA-2020-c98c7da2f6 | |
| FEDORA-2020-df7c647fa3 |