CVE-2018-19637 Static temporary filename allows overwriting of files
MediumCVSS 5.5
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
| SUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
References
- openSUSE-SU-2019:1351 vendor-advisory
- bugzilla.suse.com