CVE-2020-13882 Race condition in n/a
An unprivileged attacker can exploit a TOCTOU race condition in Lynis to bypass permission checks and manipulate log files, potentially leading to privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-13882?
CVE-2020-13882 is a medium-severity vulnerability in Fedoraproject Fedora, published on 18 Jun 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and report file, and control that up to the point where the specific routine is doing its check. After that, the file can be removed, recreated, and used for additional attacks.
Weakness: CWE-367
Which versions are affected by CVE-2020-13882?
It affects 2 products.
Products include Cisofy Lynis, Fedoraproject Fedora.
How do I fix CVE-2020-13882?
Upgrade to a fixed version.
Is CVE-2020-13882 being exploited?
There is no known exploitation of CVE-2020-13882 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as DEBIAN-CVE-2020-13882, GHSA-fgc5-qjvv-cffv, UBUNTU-CVE-2020-13882.