cbcvebase.
CVE-2018-19637
published 2019-03-05

CVE-2018-19637: Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink…

medium5.5CVSS 3.0
AVLACLPRLUINSUCNIHAN
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection

Affected

2 ranges
VendorProductVersion rangeFixed in
opensusesupportutils< 3.1-5.7.13.1-5.7.1
susesupportutils>= unspecified < 3.1-5.7.13.1-5.7.1