Aller au contenu
en Se connecter
4.4 Moyenne

CVE-2022-31252 A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3,…

Description

A Incorrect Authorization vulnerability in chkstat of SUSE Linux Enterprise Server 12-SP5; openSUSE Leap 15.3, openSUSE Leap 15.4, openSUSE Leap Micro 5.2 did not consider group writable path components, allowing local attackers with access to a group what can write to a location included in the path to a privileged binary to influence path resolution. This issue affects: SUSE Linux Enterprise Server 12-SP5 permissions versions prior to 20170707. openSUSE Leap 15.3 permissions versions prior to 20200127. openSUSE Leap 15.4 permissions versions prior to 20201225. openSUSE Leap Micro 5.2 permissions versions prior to 20181225.

Produits et versions touchés

Produit Versions touchées Corrigé en
SUSE Linux Enterprise Server 12-SP5 20170707 premières → < 20170707 20170707
openSUSE Leap 15.3 20200127 premières → < 20200127 20200127
openSUSE Leap 15.4 20201225 premières → < 20201225 20201225
openSUSE Leap Micro 5.2 20181225 premières → < 20181225 20181225

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de SUSE Linux Enterprise Server 12-SP5

Les 4 CVE de SUSE Linux Enterprise Server 12-SP5 →
CVE-2021-25316 A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise… 3.3 Faible CVE-2020-8023 A acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the start script of openldap2 of SUSE… 7.7 Élevée CVE-2020-8022 A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux… 7.7 Élevée
Suivre cette CVE