{"id":"CVE-2020-11867","aliases":["DEBIAN-CVE-2020-11867","EUVD-2020-4207","GHSA-wrfq-hrw9-9rm3","MGASA-2021-0001","UBUNTU-CVE-2020-11867","USN-7211-1","openSUSE-SU-2020:2261-1"],"status":"published","title":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After...","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00475,"percentile":0.41479,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2020-11-30T21:21:28Z","modified":"2026-10-26T12:00:20Z","fixes":[{"ecosystem":"Debian:12","package":"audacity","fixed_in":["2.4.2~dfsg0-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"audacity","fixed_in":["2.4.2~dfsg0-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"audacity","fixed_in":["2.4.2~dfsg0-4"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"audacity","fixed_in":["2.3.1-1.2.mga7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audacity","fixed_in":["2.1.2-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audacity","fixed_in":["2.2.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"audacity","fixed_in":["2.3.3-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"audacity","fixed_in":["2.2.2-bp152.4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"audacity","fixed_in":["2.2.2-bp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"audacity","fixed_in":["2.2.2-bp152.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"audacity","fixed_in":["2.2.2-bp152.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2~dfsg0-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2~dfsg0-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2~dfsg0-4"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.1-1.2.mga7"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1ubuntu0.1~esm1"}]}],"versions":["2.0.6-2build1","2.0.6-2build2","2.1.2~rc2-1","2.1.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1ubuntu0.1~esm1"}]}],"versions":["2.1.2-2","2.2.0-1build1","2.2.0-2","2.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1ubuntu0.1~esm1"}]}],"versions":["2.3.2-2","2.3.3-1","2.3.3-1build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1ubuntu0.1~esm1"}]}],"versions":["2.0.6-2build1","2.0.6-2build2","2.1.2~rc2-1","2.1.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-1ubuntu0.1~esm1"}]}],"versions":["2.1.2-2","2.2.0-1build1","2.2.0-2","2.2.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.3-1ubuntu0.1~esm1"}]}],"versions":["2.3.2-2","2.3.3-1","2.3.3-1build1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-bp152.4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-bp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-bp152.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"audacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.2-bp152.4.3.1"}]}]}],"products":[{"vendor":"audacityteam","product":"audacity"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/audacity/audacity/releases","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","advisory","report"]},{"url":"https://salvatoresecurity.com/the-many-perils-of-tmp/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11867"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MG5PSF4CJ7UPMJHWX553EG3P2XN3PAYI/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WKK3S2QBXBHOFOQMXMGY5QAKVUWUX2YY/"},{"url":"https://github.com/advisories/GHSA-wrfq-hrw9-9rm3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-11867","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0001.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27850","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MIO5YFJW5KODA2NDQAAMKAOM57Z2ZM4W/","tags":["web","advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-11867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11867","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7211-1","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179449","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11867","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-11867","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T21:21:28Z","modified":"2024-08-04T11:42:00.675Z","updated_at":"2026-11-02T14:35:57.67317Z"}],"euvd":[{"id":"EUVD-2020-4207","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T21:21:28Z","modified":"2024-08-04T11:42:00Z","updated_at":"2026-11-03T03:07:41.956166Z"}],"ghsa":[{"id":"GHSA-wrfq-hrw9-9rm3","title":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After...","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2022-05-24T17:35:05Z","modified":"2023-01-29T05:04:52Z","cwes":["CWE-276"],"updated_at":"2026-11-02T14:45:39.783328Z"}],"nvd":[{"id":"CVE-2020-11867","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T22:15:10.713Z","modified":"2026-06-17T02:50:56.79Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"CVE-2020-11867","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T22:15:10.713Z","modified":"2026-10-20T10:51:04.352407834Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:14.034736Z"},{"id":"DEBIAN-CVE-2020-11867","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T22:15:10.713Z","modified":"2026-10-26T12:00:20.558287673Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-11867","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by default. After Audacity creates the temporary directory, it sets its permissions to 755. Any user on the system can read and play the temporary audio .au files located there.","status":"published","published":"2020-11-30T22:15:00Z","modified":"2026-02-04T02:48:42.119653Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"MGASA-2021-0001","title":"Updated audacity package fixes security vulnerability","description":"Audacity through 2.3.3 saves temporary files to /var/tmp/audacity-$USER by\ndefault. After Audacity creates the temporary directory, it sets its\npermissions to 755. Any user on the system can read and play the temporary\naudio .au files located there (CVE-2020-11867).\n","status":"published","published":"2021-01-02T21:52:25Z","modified":"2026-04-16T04:43:18.406252661Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:2261-1","title":"Security update for audacity","description":"This update for audacity fixes the following issues:\n\n- CVE-2020-11867: Avoid saving temporary files to /var/tmp/audacity-$USER by default, which permissions are set to 755. (bsc#1179449)\n","status":"published","published":"2020-12-15T11:27:36Z","modified":"2026-02-04T02:34:03.635942Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"USN-7211-1","title":"audacity vulnerability","description":"Mike Salvatore discovered that Audacity incorrectly handled default\npermissions of temporary files created by the application. An attacker\ncould possibly use this issue to obtain sensitive information.\n","status":"published","published":"2025-01-16T13:12:46Z","modified":"2026-06-25T13:32:30.52592066Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}