CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.

• CWE-362

• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00026.html
• http://www.ch-werner.de/sqliteodbc/Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1825762Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDS5RK7F47BRXHUYRWGMGLYU2GJEVZQA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PR6B33IGBADGYDBTEEU36OGERER2HOGQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXPHBDVB3LAQUQJCZ4WIS3JWM7JFR56X/
• https://sysdream.com/news/lab/Third Party Advisory
• https://sysdream.com/news/lab/2020-05-25-cve-2020-12050-fedora-red-hat-centos-local-privilege-escalation-through-a-race-condition-in-the-sqliteodbc-installer-script/
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00026.html
• http://www.ch-werner.de/sqliteodbc/Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1825762Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDS5RK7F47BRXHUYRWGMGLYU2GJEVZQA/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PR6B33IGBADGYDBTEEU36OGERER2HOGQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXPHBDVB3LAQUQJCZ4WIS3JWM7JFR56X/
• https://sysdream.com/news/lab/Third Party Advisory
• https://sysdream.com/news/lab/2020-05-25-cve-2020-12050-fedora-red-hat-centos-local-privilege-escalation-through-a-race-condition-in-the-sqliteodbc-installer-script/

Published

Apr 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12045The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.8
• CVE-2020-12046Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s fir…5.7
• CVE-2020-12047The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v2…9.8
• CVE-2020-12048Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The P…7.5
• CVE-2020-12049An issue was discovered in dbus >= 1.3.0 before 1.12.18. The…5.5
• CVE-2020-1205<p>A spoofing vulnerability exists when Microsoft SharePoint…4.6
• CVE-2020-12051The CentralAuth extension through REL1_34 for MediaWiki allo…7.5
• CVE-2020-12052Grafana version < 6.7.3 is vulnerable for annotation popup X…6.1
• CVE-2020-12053In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if cert…9.8
• CVE-2020-12054The Catch Breadcrumb plugin before 1.5.4 for WordPress allow…6.1
• CVE-2020-12058Several XSS vulnerabilities in osCommerce CE Phoenix before …6.1
• CVE-2020-12059An issue was discovered in Ceph through 13.2.9. A POST reque…7.5