Factory

8 results · Clear filters · Feed

• Medium 5.3
  CVE-2022-21946

  suddoers configuration for cscreen not restrictive enough

  A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion…

  openSUSE Factory
  Mar 16, 2022
• Medium 5.1
  CVE-2022-21945

  cscreen: usage of fixed path /tmp/cscreen.debug

  A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.

  openSUSE Factory
  Mar 16, 2022
• Medium 5.9
  CVE-2021-36781

  parsec: dangerous 777 permissions for /run/parsec

  A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1…

  openSUSE Factory
  Jan 14, 2022
• Medium 6.8
  CVE-2021-25322

  python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root

  A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root. This issue affects: openSUSE Leap 15.2 python-HyperK…

  openSUSE Factory Leap 15.2 hyperkitty Ubuntu
  Jun 10, 2021
• Medium 6.8
  CVE-2021-31997

  python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root

  A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2…

  openSUSE Factory Leap 15.2
  Jun 10, 2021
• Medium 6.7
  CVE-2020-8032

  Local privilege escalation to root due to insecure tmp file usage

  A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.

  openSUSE Factory
  Feb 25, 2021
• Medium 5.7
  CVE-2019-3698

  nagios cron job allows privilege escalation from user nagios to root

  UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11; openSUSE Factory allows local attackers to cause cause DoS or potentially escalate privileges by winni…

  SUSE openSUSE Factory SUSE Linux Enterprise Server 12 Linux
  Feb 28, 2020
• Medium 4.3
  CVE-2018-12476

  obs-service-extract_file's outfilename parameter allows to write files outside of package directory

  Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. Th…

  SUSE openSUSE Factory SUSE Linux Enterprise Server 15 Linux
  Jan 27, 2020