7.8
Élevée
CVE-2021-25321 A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE…
Description
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SUSE Linux Enterprise Server 11-SP4-LTSS 2.1 | premières → < 2.1a15 | 2.1a15 |
| SUSE Manager Server 4.0 2.1 | premières → < 2.1a15 | 2.1a15 |
| SUSE OpenStack Cloud Crowbar 9 2.1 | premières → < 2.1a15 | 2.1a15 |
| Factory 2.1 | premières → 2.1a15-169.5 | Pas de correctif indiqué |
| Leap 15.2 2.1 | premières → 2.1a15-lp152.5.5 | Pas de correctif indiqué |
Références
- bugzilla.suse.com bugzilla.suse.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de SUSE Linux Enterprise Server 11-SP4-LTSS
Les 4 CVE de SUSE Linux Enterprise Server 11-SP4-LTSS →
CVE-2021-25317
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE…
3.3
Faible
CVE-2020-8023
A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE…
7.7
Élevée
CVE-2020-8019
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise…
7.7
Élevée