In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
References
Link | Resource |
---|---|
https://bugzilla.suse.com/show_bug.cgi?id=1117592 |
Configurations
History
07 Nov 2023, 02:54
Type | Values Removed | Values Added |
---|---|---|
References | () https://bugzilla.suse.com/show_bug.cgi?id=1117592 - |
Information
Published : 2019-03-15 20:29
Updated : 2024-02-28 17:08
NVD link : CVE-2018-17955
Mitre link : CVE-2018-17955
CVE.ORG link : CVE-2018-17955
JSON object : View
Products Affected
opensuse
- yast2-multipath