CVE-2020-7040
Fixed in a distro release EPSS 3%
storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)
Products: storebackup, debian_linux, opensuse backports_sle, opensuse leap, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | storebackup | 3.2.1-2 |
| Debian 13 | storebackup | 3.2.1-2 |
| Debian 14 | storebackup | 3.2.1-2 |
| Debian 8 | storebackup | 3.2.1-1+deb8u1 |
| SUSE Package Hub 15 | storeBackup | 3.5-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | storeBackup | 3.5-bp151.4.3.1 |
| Ubuntu 16.04 LTS | storebackup | 3.2.1-1+deb8u1build0.16.04.1 |
| Ubuntu 18.04 LTS | storebackup | 3.2.1-1+deb8u1build0.18.04.1 |
| Ubuntu 20.04 LTS | storebackup | 3.2.1-1+deb8u1build0.20.04.1 |
| openSUSE Leap 15.1 | storeBackup | 3.5-bp151.4.3.1 |
| openSUSE Tumbleweed | storeBackup | 3.5-13.2 |