Johannes Segitz

A UNIX Symbolic Link (Symlink) Following issue exists where the suricata user can escalate privileges to root. A symlink is a special type of file that serves as a reference to another file or directory.

A UNIX Symbolic Link (Symlink) Following vulnerability exists in the packaging of openSUSE Tumbleweed traefik2. This issue allows the `traefik` user to escalate to root privileges.

Name of the Vulnerable Software and Affected Versions: gerbera versions prior to 2.5.0-1.1 Description: A vulnerability in the gerbera package on openSUSE Tumbleweed allows the service user gerbera to escalate to root. Recommendations: For versions prior to 2.5.0-1.1, update to version 2.5.0-1.1 or later to resolve the issue.

The issue allows the RUN UPDATEDB AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges. This is due to mlocate's %post script.

The issue is related to insecure permissions in the packaging of Apache Tomcat, allowing local users to escalate to root if they win a race during package installation. This is a local privilege escalation issue.

The issue is related to incorrect default permissions in the hawk2 package, allowing users with access to the hacluster to escalate to root. This affects openSUSE Tumbleweed.

The issue is related to incorrect default permissions in the rmt-server-regsharing service of SUSE Linux Enterprise Server, allowing local attackers with access to the rmt user to escalate to root. This can be exploited by attackers to gain elevated privileges.

The issue is related to incorrect default permissions in the saphanabootstrap-formula of affected operating systems, allowing local attackers to escalate to root by manipulating the sudo configuration. This can be exploited by executing commands with elevated privileges.

A vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root.

A UNIX Symbolic Link (Symlink) Following issue in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root.

Name of the Vulnerable Software and Affected Versions: Quagga versions through 1.2.4 Description: An issue was discovered that allows users with control of the non-root-owned directory /etc/quagga to escalate their privileges to root upon package installation or update due to unsafe chown/chmod operations in the suggested spec file. Recommendations: For Quagga versions through 1.2.4, consider restricting access to the /etc/quagga directory to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a remote Integer Underflow vulnerability that might lead to denial of service. It requires a crafted message to be sent from an authenticated agent to the manager.

A UNIX Symbolic Link (Symlink) Following issue in arpwatch allows local attackers with control of the runtime user to run arpwatch and escalate to root upon the next restart of arpwatch. This is due to incorrect permission assignment for files. The issue can be exploited by a local attacker to gain root privileges.

Name of the Vulnerable Software and Affected Versions: openSUSE Factory cyrus-sasl versions 2.1.27-4.2 and prior versions. Description: A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. Recommendations: For openSUSE Factory cyrus-sasl versions 2.1.27-4.2 and prior versions, update to a version later than 2.1.27-4.2 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient access control in the inn package, which can be exploited by an attacker to escalate their privileges from the news user to root. This allows local attackers to gain elevated access.

A Creation of Temporary File With Insecure Permissions issue in hawk2 allows local attackers to escalate to root. This issue is related to the creation of temporary files with insecure permissions in the hawk2 web interface of SUSE Linux Enterprise Server and OpenSUSE Leap operating systems. Exploitation of this issue may allow an attacker to elevate their privileges.

Name of the Vulnerable Software and Affected Versions: SUSE CaaS Platform 4.5 skuba versions prior to the version including https://github.com/SUSE/skuba/pull/1416 Description: The issue is related to an Incorrect Permission Assignment for Critical Resource vulnerability in skuba, allowing local attackers to gain access to the kublet key. This vulnerability can be exploited by local attackers. Recommendations: For SUSE CaaS Platform 4.5 skuba versions prior to the version including https://github.com/SUSE/skuba/pull/1416, update to a version that includes the changes from https://github.com/SUSE/skuba/pull/1416 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: SUSE CaaS Platform 4.5 Description: A local attacker can exploit an Insecure Temporary File vulnerability in skuba to leak the `bootstrapToken` or modify the configuration file before it is processed. This can lead to arbitrary modifications of the machine or cluster. Recommendations: For SUSE CaaS Platform 4.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the acceptance of extraneous untrusted data with trusted data in the start script of openldap2, allowing local attackers to escalate privileges from user ldap to root.

The issue allows a local attacker to potentially escalate privileges to root by exploiting a race condition in the faxsetup utility, which uses chown on files in user-owned directories.