CVE catalog

CVE-2020-7040

storebackup: CVE-2020-7040

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.87% · Oct 25, 2026

storeBackup.pl in storeBackup through 3.5 relies on the /tmp/storeBackup.lock pathname, which allows symlink attacks that possibly lead to privilege escalation. (Local users can also create a plain file named /tmp/storeBackup.lock to block use of storeBackup until an admin manually deletes that file.)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianstorebackupsid3.5.2-2fixed
Debianstorebackupforky3.5.2-2fixed
Debianstorebackuptrixie3.2.1-2fixed
Debianstorebackupbookworm3.2.1-2fixed
Ubuntustorebackup16.043.2.1-1vulnerable
Ubuntustorebackup16.043.2.1-1+deb8u1build0.16.04.1fixed
Ubuntustorebackup18.043.2.1-1vulnerable
Ubuntustorebackup18.043.2.1-1+deb8u1build0.18.04.1fixed
Ubuntustorebackup20.043.2.1-1vulnerable
Ubuntustorebackup20.043.2.1-1+deb8u1build0.20.04.1fixed
SusestoreBackuppackage hub 153.5-bp151.4.3.1fixed
SusestoreBackuppackage hub 15 sp13.5-bp151.4.3.1fixed
OpensusestoreBackupleap 15.13.5-bp151.4.3.1fixed
Ubuntustorebackup16.043.2.1-1vulnerable
Ubuntustorebackup16.043.2.1-1+deb8u1build0.16.04.1fixed
Ubuntustorebackup18.043.2.1-1vulnerable
Ubuntustorebackup18.043.2.1-1+deb8u1build0.18.04.1fixed
Ubuntustorebackup20.043.2.1-1vulnerable
Ubuntustorebackup20.043.2.1-1+deb8u1build0.20.04.1fixed
OpensusestoreBackuptumbleweed3.5-13.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianstorebackupsourcesid3.2.1-2not yet assignedNot reported[949393]
Debianstorebackupsourceforky3.2.1-2not yet assignedNot reported[949393]
Debianstorebackupsourcetrixie3.2.1-2not yet assignedNot reported[949393]
Debianstorebackupsourcebookworm3.2.1-2not yet assignedNot reported[949393]
Ubuntustorebackupdeb16.043.2.1-1+deb8u1build0.16.04.1Not reportedUSN-4508-1Not reported
Ubuntustorebackupdeb18.043.2.1-1+deb8u1build0.18.04.1Not reportedUSN-4508-1Not reported
Ubuntustorebackupdeb20.043.2.1-1+deb8u1build0.20.04.1Not reportedUSN-4508-1Not reported
SusestoreBackuprpmpackage hub 153.5-bp151.4.3.1Not reportedOPENSUSE-SU-2020:0119-1Not reported
SusestoreBackuprpmpackage hub 15 sp13.5-bp151.4.3.1Not reportedOPENSUSE-SU-2020:0119-1Not reported
OpensusestoreBackuprpmleap 15.13.5-bp151.4.3.1Not reportedOPENSUSE-SU-2020:0119-1Not reported
Ubuntustorebackupdeb16.043.2.1-1+deb8u1build0.16.04.1Not reportedUBUNTU-CVE-2020-7040Not reported
Ubuntustorebackupdeb18.043.2.1-1+deb8u1build0.18.04.1Not reportedUBUNTU-CVE-2020-7040Not reported
Ubuntustorebackupdeb20.043.2.1-1+deb8u1build0.20.04.1Not reportedUBUNTU-CVE-2020-7040Not reported
OpensusestoreBackuprpmtumbleweed3.5-13.2Not reportedOPENSUSE-SU-2024:11410-1Not reported

[Debian bug #949393]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [storebackup]Fixed
    Details (2)

    • 3.2.1-2 · all · bookworm

      Fixed · Fixed: 3.2.1-2

      dsa · storebackup · debian · bookworm; dsa · storebackup · debian · 12

    • 3.2.1-2 · all · bookworm

      Fixed · Fixed: 3.2.1-2

      dsa · storebackup · debian · bookworm; dsa · storebackup · debian · 12

[Debian 13 (Trixie)]

  • [storebackup]Fixed
    Details (2)

    • 3.2.1-2 · all · trixie

      Fixed · Fixed: 3.2.1-2

      dsa · storebackup · debian · 13

    • 3.2.1-2 · all · trixie

      Fixed · Fixed: 3.2.1-2

      dsa · storebackup · debian · 13

[openSUSE Tumbleweed]

  • [storeBackup]Fixed

    Source package: [storeBackup]

    Details (1)

    • 3.5.2-1.7 · noarch · tumbleweed

      Fixed · Fixed: 3.5-13.2

      dsa · storeBackup · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]