CVE-2020-12242: OS Command Injection

Published Apr 27, 2020

Updated

Valve Source allows local users to gain privileges by writing to the /tmp/hl2relaunch file, which is later executed in the context of a different user account.

Affected Software

1 affected component

Valvesoftware Source

Event History

Apr 27, 2020

CVE Published

via MITRE·02:56 PM

Data Sourced

via MITRE·02:56 PM

Description

Frequently Asked Questions

What is CVE-2020-12242?

CVE-2020-12242 is a vulnerability in Valve Source that allows local users to gain privileges by writing to the /tmp/hl2_relaunch file.

How can local users exploit CVE-2020-12242?

Local users can exploit CVE-2020-12242 by writing to the /tmp/hl2_relaunch file in order to gain privileges.

What is the severity of CVE-2020-12242?

The severity of CVE-2020-12242 is high with a CVSS score of 7.8.

How can I protect myself from CVE-2020-12242?

To protect yourself from CVE-2020-12242, ensure that proper file permissions are set for the /tmp/hl2_relaunch file and restrict write access to authorized users only.

Is there a patch available for CVE-2020-12242?

As of now, there is no information available about a specific patch for CVE-2020-12242. It is recommended to monitor vendor updates for any available fixes or mitigations.