7.8
High
CVE-2024-22029 Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to…
Description
Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Container suse/manager/5.0/x86_64/server:5.0.0-beta1.2.122 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Enterprise Storage 7.1 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP5 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server 15 SP5 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
Show the 14 other branches Hide the 14 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP6 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP6 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server 15 SP6 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| SUSE Manager Server 4.3 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| openSUSE Leap 15.5 9.0 | earliest → < 9.0.85-150200.57.1 | 9.0.85-150200.57.1 |
| openSUSE Tumbleweed 9.0 | earliest → < 9.0.85-3.1 | 9.0.85-3.1 |
References
- bugzilla.suse.com bugzilla.suse.com
Timeline
- Published
- Last modified