PT-2018-3445

CVE-2018-19640

·

Published

2018-11-29

·

Updated

2024-06-15

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Supportutils versions prior to 3.1-5.7.1
Description: The issue is related to insufficient input validation in the Supportutils package for SUSE Linux. An attacker who can create files in the directory used for collecting log files can potentially kill arbitrary processes on the local machine. This can lead to a denial of service.
Recommendations: For versions prior to 3.1-5.7.1, update to version 3.1-5.7.1 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2019:0293-1
OPENSUSE-SU-2019_0293-1
OPENSUSE-SU-2019_1351-1
OPENSUSE-SU-2024:11415-1
SUSE-SU-2019:0480-1
SUSE-SU-2019:1122-1
SUSE-SU-2019:13976-1
Found an issue in the description? Have something to add? Feel free to write us 👾