openSUSE Factory
24 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-31253 | openldap2 – < 2.6.3-404.1 | openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself | HIGH 7.8 | 0.3 % | ||
| CVE-2022-21946 | cscreen – 1.2-1.3 | suddoers configuration for cscreen not restrictive enough | MEDIUM 5.3 | 0.3 % | ||
| CVE-2022-21945 | cscreen – 1.2-1.3 | cscreen: usage of fixed path /tmp/cscreen.debug | MEDIUM 6.1 | 0.2 % | ||
| CVE-2022-21944 | watchman – < 4.9.0-9.1 | watchman: chown in watchman@.socket unit allows symlink attack | HIGH 7.8 | 0.3 % | ||
| CVE-2021-36781 | parsec – < 0.8.1-1.1 | parsec: dangerous 777 permissions for /run/parsec | MEDIUM 5.9 | 0.2 % | ||
| CVE-2021-32000 | clone-master-clean-up – 1.6-1.4 | clone-master-clean-up: dangerous file system operations | HIGH 7.1 | 0.3 % | ||
| CVE-2021-25321 | arpwatch – 2.1a15-169.5 | arpwatch: Local privilege escalation from runtime user to root | HIGH 7.8 | 0.4 % | ||
| CVE-2021-25322 | python-HyperKitty – < 1.3.4-5.1 | python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root | HIGH 7.8 | 0.4 % | ||
| CVE-2021-31997 | python-postorius – 1.3.4-2.1 | python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root | HIGH 7.8 | 0.3 % | ||
| CVE-2021-25317 | cups – 2.3.3op2-2.1 | cups: ownership of /var/log/cups allows the lp user to create files as root | LOW 3.3 | 0.3 % | ||
| CVE-2021-25319 | virtualbox – 6.1.20-1.1 | virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group | HIGH 7.8 | 0.3 % | ||
| CVE-2020-8032 | cyrus-sasl – 2.1.27-4.2 | Local privilege escalation to root due to insecure tmp file usage | HIGH 7.0 | 0.4 % | ||
| CVE-2020-8015 | exim – < 4.93.0.4-3.1 | Local privilege escalation in exim package from user mail to root | HIGH 8.4 | 0.5 % | ||
| CVE-2019-18903 | wicked – < 0.6.62 | wicked: Use-after-free when receiving invalid DHCP6 IA_PD option | CRITICAL 9.8 | 2.4 % | ||
| CVE-2019-18902 | wicked – < 0.6.62 | wicked: Use-after-free when receiving invalid DHCP6 client options | CRITICAL 9.8 | 2.4 % | ||
| CVE-2019-18897 | salt-master – 2019.2.2-3.1 | Local privilege escalation from user salt to root | HIGH 8.4 | 0.4 % | ||
| CVE-2019-3698 | nagios – 4.4.5-2.1 | nagios cron job allows privilege escalation from user nagios to root | HIGH 7.0 | 0.7 % | ||
| CVE-2018-12476 | obs-service-tar_scm – < 0.9.2.1537788075.fefaa74 | obs-service-extract_file's outfilename parameter allows to write files outside of package directory | HIGH 7.5 | 1.0 % | ||
| CVE-2019-3700 | yast2-security – < 4.2.6 | yast: Fallback to DES without configuration in /etc/login.def | LOW 3.3 | 0.1 % | ||
| CVE-2019-3699 | privoxy – 3.0.28-2.1 | Local privilege escalation from user privoxy to root | HIGH 7.8 | 0.4 % | ||
| CVE-2019-3694 | munin – 2.0.49-4.2 | Local privilege escalation from munin to root in the packaging of munin | HIGH 7.8 | 0.4 % | ||
| CVE-2019-3692 | inn – 2.6.2-2.2 | Local privilege escalation from user news to root in the packaging of inn | HIGH 7.8 | 0.5 % | ||
| CVE-2019-3691 | munge – < 0.5.13-6.1 | Local privilege escalation from user munge to root | HIGH 7.8 | 0.5 % | ||
| CVE-2019-18898 | trousers – < 0.3.14-7.1 | trousers: Local privilege escalation from tss to root | HIGH 7.8 | 0.5 % |