CVE-2018-19638 User can overwrite arbitrary log files in support tar
MediumCVSS 4.7
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
| SUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
References
- openSUSE-SU-2019:1351 vendor-advisory
- bugzilla.suse.com