ZeroHour

CVE-2018-19640

CVSS 3.0
5.5 medium
EPSS
<1%p23
Published
()
Modified
Description

If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.

Vendors
opensuse
Products
supportutils
Weakness
CWE-377, CWE-20
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.