Skip to content
OpenAdvisories

Product · SUSE

supportutils

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.7
    CVE-2018-19639

    Code execution if run with command line switch -v

    If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.

    SUSE supportutils
  • Medium 4.4
    CVE-2018-19640

    Code execution if run with command line switch -v

    If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.

    SUSE supportutils