Skip to content
OpenAdvisories

Product · SUSE

supportutils

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.2
    CVE-2018-19638

    User can overwrite arbitrary log files in support tar

    In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.

    SUSE supportutils
  • Low 2.8
    CVE-2018-19637

    Static temporary filename allows overwriting of files

    Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection

    SUSE supportutils