Skip to content
fr Sign in
7.7 High

CVE-2019-18898 UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1;…

Description

UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 15 SP1 0.3 earliest → < 0.3.14-6.3.1 0.3.14-6.3.1
Factory 0.3 earliest → < 0.3.14-7.1 0.3.14-7.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server 15 SP1

The 3 CVEs of SUSE Linux Enterprise Server 15 SP1 →
CVE-2021-32000 A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up… 3.2 Low CVE-2020-8018 A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images… 8.4 High
Track this CVE