CVE-2020-8016

A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
TOCTOU
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.9 MEDIUM
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
Affected Products (NVD)
VendorProductVersion
opensusetexlive-filesystem
𝑥
< 2017.135-9.5.1
opensusetexlive-filesystem
𝑥
< 2013.74-16.5.1
opensusetexlive-filesystem
𝑥
< 2013.74-16.5.1
opensusetexlive-filesystem
-
opensusetexlive-filesystem
𝑥
< 2017.135-lp151.8.3.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
texlive-base
bionic
not-affected
eoan
not-affected
trusty
dne
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libkpathsea6
suse enterprise desktop 15 SP1
6.2.3-11.13.2
fixed
suse enterprise desktop 15 SP2
6.2.3-19.4
fixed
suse enterprise desktop 15 SP3
6.2.3-19.4
fixed
suse enterprise desktop 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise desktop 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise desktop 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise desktop 15 SP7
6.3.3-150600.36.10
fixed
suse enterprise sap 15 SP1
6.2.3-11.13.2
fixed
suse enterprise sap 15 SP2
6.2.3-19.4
fixed
suse enterprise sap 15 SP3
6.2.3-19.4
fixed
suse enterprise sap 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise sap 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise sap 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise sap 15 SP7
6.3.3-150600.36.10
fixed
suse enterprise server 15 SP1
6.2.3-11.13.2
fixed
suse enterprise server 15 SP2
6.2.3-19.4
fixed
suse enterprise server 15 SP3
6.2.3-19.4
fixed
suse enterprise server 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise server 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise server 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise server 15 SP7
6.3.3-150600.36.10
fixed
libptexenc1
suse enterprise desktop 15 SP1
1.3.5-11.13.2
fixed
suse enterprise desktop 15 SP2
1.3.5-19.4
fixed
suse enterprise desktop 15 SP3
1.3.5-19.4
fixed
suse enterprise desktop 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise desktop 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise desktop 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise desktop 15 SP7
1.3.9-150600.36.10
fixed
suse enterprise sap 15 SP1
1.3.5-11.13.2
fixed
suse enterprise sap 15 SP2
1.3.5-19.4
fixed
suse enterprise sap 15 SP3
1.3.5-19.4
fixed
suse enterprise sap 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise sap 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise sap 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise sap 15 SP7
1.3.9-150600.36.10
fixed
suse enterprise server 15 SP1
1.3.5-11.13.2
fixed
suse enterprise server 15 SP2
1.3.5-19.4
fixed
suse enterprise server 15 SP3
1.3.5-19.4
fixed
suse enterprise server 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise server 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise server 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise server 15 SP7
1.3.9-150600.36.10
fixed
libsynctex1
suse enterprise desktop 15 SP1
1.18-11.13.2
fixed
suse enterprise desktop 15 SP2
1.18-19.4
fixed
suse enterprise desktop 15 SP3
1.18-19.4
fixed
suse enterprise sap 15 SP1
1.18-11.13.2
fixed
suse enterprise sap 15 SP2
1.18-19.4
fixed
suse enterprise sap 15 SP3
1.18-19.4
fixed
suse enterprise server 15 SP1
1.18-11.13.2
fixed
suse enterprise server 15 SP2
1.18-19.4
fixed
suse enterprise server 15 SP3
1.18-19.4
fixed
libsynctex2
suse enterprise desktop 15 SP4
1.21-150400.29.15
fixed
suse enterprise desktop 15 SP5
1.21-150400.29.15
fixed
suse enterprise desktop 15 SP6
1.21-150600.36.10
fixed
suse enterprise desktop 15 SP7
1.21-150600.36.10
fixed
suse enterprise sap 15 SP4
1.21-150400.29.15
fixed
suse enterprise sap 15 SP5
1.21-150400.29.15
fixed
suse enterprise sap 15 SP6
1.21-150600.36.10
fixed
suse enterprise sap 15 SP7
1.21-150600.36.10
fixed
suse enterprise server 15 SP4
1.21-150400.29.15
fixed
suse enterprise server 15 SP5
1.21-150400.29.15
fixed
suse enterprise server 15 SP6
1.21-150600.36.10
fixed
suse enterprise server 15 SP7
1.21-150600.36.10
fixed
libtexlua52-5
suse enterprise desktop 15 SP1
5.2.4-11.13.2
fixed
suse enterprise desktop 15 SP2
5.2.4-19.4
fixed
suse enterprise desktop 15 SP3
5.2.4-19.4
fixed
suse enterprise sap 15 SP1
5.2.4-11.13.2
fixed
suse enterprise sap 15 SP2
5.2.4-19.4
fixed
suse enterprise sap 15 SP3
5.2.4-19.4
fixed
suse enterprise server 15 SP1
5.2.4-11.13.2
fixed
suse enterprise server 15 SP2
5.2.4-19.4
fixed
suse enterprise server 15 SP3
5.2.4-19.4
fixed
libtexlua53-5
suse enterprise desktop 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise desktop 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise desktop 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise desktop 15 SP7
5.3.6-150600.36.10
fixed
suse enterprise sap 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise sap 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise sap 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise sap 15 SP7
5.3.6-150600.36.10
fixed
suse enterprise server 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise server 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise server 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise server 15 SP7
5.3.6-150600.36.10
fixed
texlive
suse enterprise desktop 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise desktop 15 SP2
2017.20170520-19.4
fixed
suse enterprise desktop 15 SP3
2017.20170520-19.4
fixed
suse enterprise desktop 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise desktop 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise desktop 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise desktop 15 SP7
2021.20210325-150600.36.10
fixed
suse enterprise sap 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise sap 15 SP2
2017.20170520-19.4
fixed
suse enterprise sap 15 SP3
2017.20170520-19.4
fixed
suse enterprise sap 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise sap 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise sap 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise sap 15 SP7
2021.20210325-150600.36.10
fixed
suse enterprise server 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise server 15 SP2
2017.20170520-19.4
fixed
suse enterprise server 15 SP3
2017.20170520-19.4
fixed
suse enterprise server 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise server 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise server 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise server 15 SP7
2021.20210325-150600.36.10
fixed
texlive-bin-devel
suse enterprise desktop 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise desktop 15 SP2
2017.20170520-19.4
fixed
suse enterprise desktop 15 SP3
2017.20170520-19.4
fixed
suse enterprise desktop 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise desktop 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise desktop 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise desktop 15 SP7
2021.20210325-150600.36.10
fixed
suse enterprise sap 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise sap 15 SP2
2017.20170520-19.4
fixed
suse enterprise sap 15 SP3
2017.20170520-19.4
fixed
suse enterprise sap 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise sap 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise sap 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise sap 15 SP7
2021.20210325-150600.36.10
fixed
suse enterprise server 15 SP1
2017.20170520-11.13.2
fixed
suse enterprise server 15 SP2
2017.20170520-19.4
fixed
suse enterprise server 15 SP3
2017.20170520-19.4
fixed
suse enterprise server 15 SP4
2021.20210325-150400.29.15
fixed
suse enterprise server 15 SP5
2021.20210325-150400.29.15
fixed
suse enterprise server 15 SP6
2021.20210325-150600.36.10
fixed
suse enterprise server 15 SP7
2021.20210325-150600.36.10
fixed
texlive-devel
suse enterprise desktop 15 SP1
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP2
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP3
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP4
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP5
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP6
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP7
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP1
2017.135-9.12.1
fixed
suse enterprise sap 15 SP2
2017.135-9.12.1
fixed
suse enterprise sap 15 SP3
2017.135-9.12.1
fixed
suse enterprise sap 15 SP4
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP5
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP6
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP7
2021.185-150400.19.4
fixed
suse enterprise server 15 SP1
2017.135-9.12.1
fixed
suse enterprise server 15 SP2
2017.135-9.12.1
fixed
suse enterprise server 15 SP3
2017.135-9.12.1
fixed
suse enterprise server 15 SP4
2021.185-150400.19.4
fixed
suse enterprise server 15 SP5
2021.185-150400.19.4
fixed
suse enterprise server 15 SP6
2021.185-150400.19.4
fixed
suse enterprise server 15 SP7
2021.185-150400.19.4
fixed
texlive-extratools
suse enterprise desktop 15 SP1
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP2
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP3
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP4
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP5
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP6
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP7
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP1
2017.135-9.12.1
fixed
suse enterprise sap 15 SP2
2017.135-9.12.1
fixed
suse enterprise sap 15 SP3
2017.135-9.12.1
fixed
suse enterprise sap 15 SP4
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP5
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP6
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP7
2021.185-150400.19.4
fixed
suse enterprise server 15 SP1
2017.135-9.12.1
fixed
suse enterprise server 15 SP2
2017.135-9.12.1
fixed
suse enterprise server 15 SP3
2017.135-9.12.1
fixed
suse enterprise server 15 SP4
2021.185-150400.19.4
fixed
suse enterprise server 15 SP5
2021.185-150400.19.4
fixed
suse enterprise server 15 SP6
2021.185-150400.19.4
fixed
suse enterprise server 15 SP7
2021.185-150400.19.4
fixed
texlive-filesystem
suse enterprise desktop 15 SP1
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP2
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP3
2017.135-9.12.1
fixed
suse enterprise desktop 15 SP4
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP5
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP6
2021.185-150400.19.4
fixed
suse enterprise desktop 15 SP7
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP1
2017.135-9.12.1
fixed
suse enterprise sap 15 SP2
2017.135-9.12.1
fixed
suse enterprise sap 15 SP3
2017.135-9.12.1
fixed
suse enterprise sap 15 SP4
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP5
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP6
2021.185-150400.19.4
fixed
suse enterprise sap 15 SP7
2021.185-150400.19.4
fixed
suse enterprise server 15 SP1
2017.135-9.12.1
fixed
suse enterprise server 15 SP2
2017.135-9.12.1
fixed
suse enterprise server 15 SP3
2017.135-9.12.1
fixed
suse enterprise server 15 SP4
2021.185-150400.19.4
fixed
suse enterprise server 15 SP5
2021.185-150400.19.4
fixed
suse enterprise server 15 SP6
2021.185-150400.19.4
fixed
suse enterprise server 15 SP7
2021.185-150400.19.4
fixed
texlive-kpathsea-devel
suse enterprise desktop 15 SP1
6.2.3-11.13.2
fixed
suse enterprise desktop 15 SP2
6.2.3-19.4
fixed
suse enterprise desktop 15 SP3
6.2.3-19.4
fixed
suse enterprise desktop 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise desktop 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise desktop 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise desktop 15 SP7
6.3.3-150600.36.10
fixed
suse enterprise sap 15 SP1
6.2.3-11.13.2
fixed
suse enterprise sap 15 SP2
6.2.3-19.4
fixed
suse enterprise sap 15 SP3
6.2.3-19.4
fixed
suse enterprise sap 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise sap 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise sap 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise sap 15 SP7
6.3.3-150600.36.10
fixed
suse enterprise server 15 SP1
6.2.3-11.13.2
fixed
suse enterprise server 15 SP2
6.2.3-19.4
fixed
suse enterprise server 15 SP3
6.2.3-19.4
fixed
suse enterprise server 15 SP4
6.3.3-150400.29.15
fixed
suse enterprise server 15 SP5
6.3.3-150400.29.15
fixed
suse enterprise server 15 SP6
6.3.3-150600.36.10
fixed
suse enterprise server 15 SP7
6.3.3-150600.36.10
fixed
texlive-ptexenc-devel
suse enterprise desktop 15 SP1
1.3.5-11.13.2
fixed
suse enterprise desktop 15 SP2
1.3.5-19.4
fixed
suse enterprise desktop 15 SP3
1.3.5-19.4
fixed
suse enterprise desktop 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise desktop 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise desktop 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise desktop 15 SP7
1.3.9-150600.36.10
fixed
suse enterprise sap 15 SP1
1.3.5-11.13.2
fixed
suse enterprise sap 15 SP2
1.3.5-19.4
fixed
suse enterprise sap 15 SP3
1.3.5-19.4
fixed
suse enterprise sap 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise sap 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise sap 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise sap 15 SP7
1.3.9-150600.36.10
fixed
suse enterprise server 15 SP1
1.3.5-11.13.2
fixed
suse enterprise server 15 SP2
1.3.5-19.4
fixed
suse enterprise server 15 SP3
1.3.5-19.4
fixed
suse enterprise server 15 SP4
1.3.9-150400.29.15
fixed
suse enterprise server 15 SP5
1.3.9-150400.29.15
fixed
suse enterprise server 15 SP6
1.3.9-150600.36.10
fixed
suse enterprise server 15 SP7
1.3.9-150600.36.10
fixed
texlive-synctex-devel
suse enterprise desktop 15 SP1
1.18-11.13.2
fixed
suse enterprise desktop 15 SP2
1.18-19.4
fixed
suse enterprise desktop 15 SP3
1.18-19.4
fixed
suse enterprise desktop 15 SP4
1.21-150400.29.15
fixed
suse enterprise desktop 15 SP5
1.21-150400.29.15
fixed
suse enterprise desktop 15 SP6
1.21-150600.36.10
fixed
suse enterprise desktop 15 SP7
1.21-150600.36.10
fixed
suse enterprise sap 15 SP1
1.18-11.13.2
fixed
suse enterprise sap 15 SP2
1.18-19.4
fixed
suse enterprise sap 15 SP3
1.18-19.4
fixed
suse enterprise sap 15 SP4
1.21-150400.29.15
fixed
suse enterprise sap 15 SP5
1.21-150400.29.15
fixed
suse enterprise sap 15 SP6
1.21-150600.36.10
fixed
suse enterprise sap 15 SP7
1.21-150600.36.10
fixed
suse enterprise server 15 SP1
1.18-11.13.2
fixed
suse enterprise server 15 SP2
1.18-19.4
fixed
suse enterprise server 15 SP3
1.18-19.4
fixed
suse enterprise server 15 SP4
1.21-150400.29.15
fixed
suse enterprise server 15 SP5
1.21-150400.29.15
fixed
suse enterprise server 15 SP6
1.21-150600.36.10
fixed
suse enterprise server 15 SP7
1.21-150600.36.10
fixed
texlive-texlua-devel
suse enterprise desktop 15 SP1
5.2.4-11.13.2
fixed
suse enterprise desktop 15 SP2
5.2.4-19.4
fixed
suse enterprise desktop 15 SP3
5.2.4-19.4
fixed
suse enterprise desktop 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise desktop 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise desktop 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise desktop 15 SP7
5.3.6-150600.36.10
fixed
suse enterprise sap 15 SP1
5.2.4-11.13.2
fixed
suse enterprise sap 15 SP2
5.2.4-19.4
fixed
suse enterprise sap 15 SP3
5.2.4-19.4
fixed
suse enterprise sap 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise sap 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise sap 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise sap 15 SP7
5.3.6-150600.36.10
fixed
suse enterprise server 15 SP1
5.2.4-11.13.2
fixed
suse enterprise server 15 SP2
5.2.4-19.4
fixed
suse enterprise server 15 SP3
5.2.4-19.4
fixed
suse enterprise server 15 SP4
5.3.6-150400.29.15
fixed
suse enterprise server 15 SP5
5.3.6-150400.29.15
fixed
suse enterprise server 15 SP6
5.3.6-150600.36.10
fixed
suse enterprise server 15 SP7
5.3.6-150600.36.10
fixed
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.html
https://bugzilla.suse.com/show_bug.cgi?id=1159740
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00021.html
https://bugzilla.suse.com/show_bug.cgi?id=1159740