DEBIAN-CVE-2020-29582

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2020-29582

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2020-29582.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2020-29582

Upstream

CVE-2020-29582

Published

2021-02-03T16:15:13Z

Modified

2025-09-19T06:11:20Z

Summary

[none]

Details

In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions.

References

https://security-tracker.debian.org/tracker/CVE-2020-29582

Affected packages

Debian:13 / kotlin

Package

Name: kotlin
Purl: pkg:deb/debian/kotlin?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.31+ds1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / kotlin

Package

Name: kotlin
Purl: pkg:deb/debian/kotlin?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.31+ds1-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}