7.7
Élevée
CVE-2022-31256 A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail…
Description
A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| openSUSE Factory 8.17 | premières → < 8.17.1-1.1 | 8.17.1-1.1 |
Autres CVE de openSUSE Factory
Les 5 CVE de openSUSE Factory →
CVE-2024-22038
Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information…
7.3
Élevée
CVE-2022-45155
An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows…
5.5
Moyenne
CVE-2022-31251
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local…
6.5
Moyenne
CVE-2021-46705
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory…
5.1
Moyenne