NetSight
IP …
high7.0

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can repl…

Impact

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.

Affected products

VendorProductAffected versions
OpensuseBackports Sle
Version 15.0
FedoraprojectFedora
Versions 30, 31, 32
Sqliteodbc ProjectSqliteodbc
Version 0.9996

Weakness classification

CWE-362

References