CVE-2020-8032: A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attack

Q: How do I fix CVE-2020-8032?

cyrus-sasl: upgrade to newer than 2.1.27. Exact commands for each OS are on this page.

Q: Is CVE-2020-8032 being exploited?

CVE-2020-8032 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2020-8032 affect?

CVE-2020-8032 affects cyrus-sasl. Severity is medium (CVSS 6.7). A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

Q: How urgent is CVE-2020-8032?

Priority 36/100. Public exploit reference

Routine

MEDIUM 6.7UPGRADE

CVE-2020-8032 is a medium-severity flaw (CVSS 6.7) affecting cyrus-sasl. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

Why this priority

Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	6.7 (Medium)
Attack vector	Local
Attack complexity	High
Privileges needed	None
User interaction	None
EPSS exploit chance	0.4% (top 71%)
CISA exploited list	No
Weakness	CWE-377
Published	2021-02-25
Last modified	2026-06-17

Publisher (CNA): SUSE · Vendor: opensuse

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2021-02-25 10:15 UTCPublished CVE record published
2026-06-17 03:25 UTCUpdated Record last modified

opensuse cyrus-sasl UPGRADE

Affected: <= 2.1.27

Fixed in: newer than 2.1.27

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy cyrus-sasl || rpm -q cyrus-sasl || cyrus-sasl --version

2. UPGRADE to newer than 2.1.27 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade cyrus-sasl

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade cyrus-sasl

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2020-8032?

cyrus-sasl: upgrade to newer than 2.1.27. Exact commands for each OS are on this page.

Is CVE-2020-8032 being exploited?

CVE-2020-8032 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2020-8032 affect?

CVE-2020-8032 affects cyrus-sasl. Severity is medium (CVSS 6.7). A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

How urgent is CVE-2020-8032?

Priority 36/100. Public exploit reference

Related CVEs

CVE-2022-24407 HIGH 8.8 UPGRADE MITIGATE In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT
CVE-2019-19906 HIGH 7.5 UPGRADE MITIGATE cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-serv
CVE-2013-4122 MEDIUM 4.3 UPGRADE Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by
CVE-2009-0688 HIGH 7.5 UPGRADE Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute

References

← Back to latest CVEs