Skip to content
OpenAdvisories

Product · openSUSE

Factory

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.2
    CVE-2021-32000

    clone-master-clean-up: dangerous file system operations

    A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary fil…

    SUSE openSUSE Factory SUSE Linux Enterprise Server 15 SP1 Linux
  • Low 3.3
    CVE-2021-25317

    cups: ownership of /var/log/cups allows the lp user to create files as root

    A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to cre…

    SUSE openSUSE Factory openSUSE Leap 15.2 Linux
  • Low 2.9
    CVE-2019-3700

    yast: Fallback to DES without configuration in /etc/login.def

    yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until…

    openSUSE Factory