CVE-2020-11867 - CVE House
Back to Database
Status published Low CVE-2020-11867

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default....

Vulnerability Description

Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11867

Credits & Attribution

No credits recorded in the NVD database.

References

More from audacityteam

View All →
CVE-2017-1000010
Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in...
High 7.8
CVE-2016-2541
Audacity before 2.1.2 allows remote attackers to cause a denial...
Medium 5.5
CVE-2016-2540
Audacity before 2.1.2 allows remote attackers to cause a denial...
Medium 5.5
CVE-2009-0490
Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in...
Critical 9.3
CVE-2007-6061
Audacity 1.3.2 creates a temporary directory with a predictable name...
Medium 5

Affected Vendor

audacityteam

View all reports →

Affected Software

audacity, fedora
Vulnerable Versions:
0, 33, 34

Timeline

Official Publish: November 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.