CVE-2009-0035: Alsa-Project Alsa

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

Affected products

• Alsa-Project Alsa: from 1.0.19, before 1.0.20 (fixed in 1.0.20)

Published 2019-11-09. Last modified 2026-06-16.