CVE-2018-19640 Code execution if run with command line switch -v
MediumCVSS 5.5
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
| SUSE supportutils | < 3.1-5.7.1 | 3.1-5.7.1 |
References
- openSUSE-SU-2019:1351 vendor-advisory
- bugzilla.suse.com