4.4
Moyenne
CVE-2018-19640 If the attacker manages to create files in the directory used to collect log files in supportutils before version…
Description
If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| supportutils 3.1 | premières → < 3.1-5.7.1 | 3.1-5.7.1 |
Autres CVE de supportutils
Les 5 CVE de supportutils →
CVE-2018-19636
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath…
7.3
Élevée
CVE-2018-19637
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite…
2.8
Faible
CVE-2018-19638
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have…
2.2
Faible
CVE-2018-19639
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to…
6.7
Moyenne