CVE-2020-12050: 
Homebrew vulnerability analysis and mitigation

CVE-2020-12050 affects SQLiteODBC version 0.9996, specifically as packaged for certain Linux distributions as version 0.9996-4. The vulnerability was discovered in April 2020 and involves a race condition that can lead to root privilege escalation. The affected software is a database driver that provides ODBC connectivity for SQLite databases (NVD).

The vulnerability exists in the package installation script where a temporary configuration file is created in the /tmp directory with a predictable name format '/tmp/sqliteodbc$$' (where $$ represents the process ID). Due to improper file handling, any user can replace this file with new contents that cause loading of an arbitrary library. The vulnerability has been assigned a CVSS v3.1 base score of 7.0 (HIGH) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD, RedHat Bugzilla).

The vulnerability allows local users to escalate their privileges to root level by exploiting the race condition. This can lead to complete system compromise as the attacker can execute arbitrary code with root privileges (RedHat Bugzilla).

The vulnerability requires local access and is exploitable through a race condition attack. A proof of concept exploit has been developed that demonstrates successful privilege escalation by creating multiple hardlinks in the /tmp directory targeting a malicious payload (RedHat Bugzilla).

The vulnerability has been fixed in updated versions of the package by using mktemp(1) for temporary file name creation instead of the predictable naming pattern. Various Linux distributions have released security updates to address this vulnerability, including Fedora 30 (0.9996-4.fc30), Fedora 31 (0.9996-6.fc31), and Fedora 32 (0.9996-6.fc32) (Fedora Update).