Opensuse Factory vulnerabilities

26 known vulnerabilities affecting opensuse/factory.

Total CVEs

26

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH18MEDIUM4LOW2

Vulnerabilities

Page 2 of 2

CVE-2019-3692HIGHCVSS 7.8≥ inn, ≤ 2.6.2-2.22020-01-24

CVE-2019-3692 [HIGH] CWE-59 CVE-2019-3692: The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local at The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.

CVE-2019-3694HIGHCVSS 7.8≥ munin, ≤ 2.0.49-4.22020-01-24

CVE-2019-3694 [HIGH] CWE-59 CVE-2019-3694: A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Lea A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1 and prior versions.

CVE-2019-3699HIGHCVSS 7.8≥ privoxy, ≤ 3.0.28-2.12020-01-24

CVE-2019-3699 [HIGH] CWE-59 CVE-2019-3699: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15 UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version 3.0.28-2.1 and prior versions.

CVE-2019-3700LOWCVSS 3.3≥ yast2-security, < 4.2.62020-01-24

CVE-2019-3700 [LOW] CWE-327 CVE-2019-3700: yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until yast2-security switched to stronger defaults in 4.2.6 and used the new configuration file locatio

CVE-2019-18898HIGHCVSS 7.8≥ trousers, < 0.3.14-7.12020-01-23

CVE-2019-18898 [HIGH] CWE-59 CVE-2019-18898: UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterpris UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.

CVE-2019-3691HIGHCVSS 7.8≥ munge, < 0.5.13-6.12020-01-23

CVE-2019-3691 [HIGH] CWE-59 CVE-2019-3691: A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.

← Previous2 / 2