6.7
Moyenne
CVE-2018-19639 If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to…
Description
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| supportutils 3.1 | premières → < 3.1-5.7.1 | 3.1-5.7.1 |
Références
- bugzilla.suse.com bugzilla.suse.com
- openSUSE-SU-2019:1351 lists.opensuse.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de supportutils
Les 5 CVE de supportutils →
CVE-2018-19640
If the attacker manages to create files in the directory used to collect log files in supportutils before version…
4.4
Moyenne
CVE-2018-19636
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath…
7.3
Élevée
CVE-2018-19637
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite…
2.8
Faible
CVE-2018-19638
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have…
2.2
Faible