Debian Timeshift vulnerabilities

1 known vulnerability affecting debian/timeshift.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-10174HIGHCVSS 7.0fixed in timeshift 20.03+ds-1 (bookworm)2020

CVE-2020-10174 [HIGH] CVE-2020-10174: timeshift - init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a p... init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses directories owned by unprivileged users. Because Timeshift also executes scripts under this location, an attacker can attempt to win a race condition to replace scrip