Advisories · Technology

SUSE supportutils.

Every CVE that names SUSE supportutils among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-19640 CVE record

CVSS 4.4 Medium

Code execution if run with command line switch -v
- SUSE supportutils
- CWE-377
Not analysed yet 5 Mar 2019
CVE-2018-19639 CVE record

CVSS 6.7 Medium

Code execution if run with command line switch -v
- SUSE supportutils
- Command injection
Not analysed yet 5 Mar 2019
CVE-2018-19638 CVE record

CVSS 2.2 Low

User can overwrite arbitrary log files in support tar
- SUSE supportutils
- CWE-377
Not analysed yet 5 Mar 2019
CVE-2018-19637 CVE record

CVSS 2.8 Low

Static temporary filename allows overwriting of files
- SUSE supportutils
- CWE-377
Not analysed yet 5 Mar 2019
CVE-2018-19636 CVE record

CVSS 7.3 High

Local root exploit via inclusion of attacker controlled shell script
- SUSE supportutils
- Authentication bypass
Not analysed yet 5 Mar 2019