6.7
Medium
CVE-2018-19639 If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to…
Description
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| supportutils 3.1 | earliest → < 3.1-5.7.1 | 3.1-5.7.1 |
Other CVEs of supportutils
The 5 CVEs of supportutils →
CVE-2018-19640
If the attacker manages to create files in the directory used to collect log files in supportutils before version…
4.4
Medium
CVE-2018-19636
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath…
7.3
High
CVE-2018-19637
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite…
2.8
Low
CVE-2018-19638
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have…
2.2
Low