openSUSE Factory

5 results · Feed

• High 7.3
  CVE-2024-22038

  DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge

  Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service.

  SUSE openSUSE Factory
  Nov 28, 2024
• Medium 5.5
  CVE-2022-45155

  obs-service-go_modules: arbitrary directory delete

  An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSU…

  SUSE openSUSE Factory
  Mar 15, 2023
• High 7.7
  CVE-2022-31256

  sendmail: mail to root privilege escalation via sm-client.pre script

  A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail…

  SUSE openSUSE Factory
  Oct 26, 2022
• Medium 6.5
  CVE-2022-31251

  slurm: %post for slurm-testsuite operates as root in user owned directory

  A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.

  SUSE openSUSE Factory
  Sep 7, 2022
• Medium 5.1
  CVE-2021-46705

  grub2-once uses fixed file name in /var/tmp

  A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150…

  SUSE openSUSE Factory SUSE Linux Enterprise Server 15 SP4 Linux
  Mar 16, 2022