Skip to content
fr Sign in
5.1 Medium

CVE-2019-18901 A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE…

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Linux Enterprise Server 12 mariadb versions prior to 10.2.31-3.25.1. SUSE Linux Enterprise Server 15 mariadb versions prior to 10.2.31-3.26.1.

Affected products and versions

Product Affected versions Fixed in
SUSE Linux Enterprise Server 12 10.2 earliest → < 10.2.31-3.25.1 10.2.31-3.25.1
SUSE Linux Enterprise Server 15 10.2 earliest → < 10.2.31-3.26.1 10.2.31-3.26.1

References

Timeline

  1. Published
  2. Last modified

Other CVEs of SUSE Linux Enterprise Server 12

The 12 CVEs of SUSE Linux Enterprise Server 12 →
CVE-2022-45154 A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE… 4.4 Medium CVE-2019-18905 A Insufficient Verification of Data Authenticity vulnerability in autoyast2 of SUSE Linux Enterprise Server 12, SUSE… 4.8 Medium CVE-2019-18902 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High CVE-2019-18903 A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE… 7.5 High
Track this CVE