6.3
Medium
CVE-2015-0796 In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application…
Description
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| open build service 2.6 | 2.6 → < 2.6.3 | 2.6.3 |
| open build service 2.5 | 2.5 → < 2.5.7 | 2.5.7 |
| open build service 2.4 | 2.4 → < 2.4.8 | 2.4.8 |
References
- bugzilla.suse.com bugzilla.suse.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of open build service
The 5 CVEs of open build service →
CVE-2022-21949
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers…
8.8
High
CVE-2011-4183
A vulnerability in open build service allows remote attackers to upload arbitrary RPM files
6.5
Medium
CVE-2011-4181
A vulnerability in open build service allows remote attackers to gain access to source files even though source access…
4.3
Medium
CVE-2017-9268
In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for…
4.4
Medium