2.2
Faible
CVE-2018-19638 In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have…
Description
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| supportutils 3.1 | premières → < 3.1-5.7.1 | 3.1-5.7.1 |
Références
- bugzilla.suse.com bugzilla.suse.com
- openSUSE-SU-2019:1351 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de supportutils
Les 5 CVE de supportutils →
CVE-2018-19640
If the attacker manages to create files in the directory used to collect log files in supportutils before version…
4.4
Moyenne
CVE-2018-19636
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath…
7.3
Élevée
CVE-2018-19637
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite…
2.8
Faible
CVE-2018-19639
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to…
6.7
Moyenne