7.7
High
CVE-2022-31256 A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail…
Description
A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE Factory 8.17 | earliest → < 8.17.1-1.1 | 8.17.1-1.1 |
References
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified
Other CVEs of openSUSE Factory
The 5 CVEs of openSUSE Factory →
CVE-2024-22038
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information…
7.3
High
CVE-2022-45155
An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows…
5.5
Medium
CVE-2022-31251
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local…
6.5
Medium
CVE-2021-46705
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory…
5.1
Medium