Skip to content
fr Sign in
7.7 High

CVE-2020-8014 A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1,…

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.

Affected products and versions

Product Affected versions Fixed in
openSUSE Leap 15.1 10.0 earliest → < 10.0.5-lp151.4.1 10.0.5-lp151.4.1
openSUSE Tumbleweed 10.0 earliest → < 10.0.5-1.1 10.0.5-1.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of openSUSE Leap 15.1

The 13 CVEs of openSUSE Leap 15.1 →
CVE-2020-8027 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise… 7.3 High CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 High CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server… 6.1 Medium CVE-2020-8026 A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed,… 8.4 High
Track this CVE