Aller au contenu
en Se connecter
7.7 Élevée

CVE-2020-8014 A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1,…

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
openSUSE Leap 15.1 10.0 premières → < 10.0.5-lp151.4.1 10.0.5-lp151.4.1
openSUSE Tumbleweed 10.0 premières → < 10.0.5-1.1 10.0.5-1.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openSUSE Leap 15.1

Les 13 CVE de openSUSE Leap 15.1 →
CVE-2020-8027 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise… 7.3 Élevée CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 Élevée CVE-2020-8025 A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server… 6.1 Moyenne CVE-2020-8026 A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed,… 8.4 Élevée
Suivre cette CVE