CVE-2020-8018

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CAP-Deployment-BYOS versions prior to 1.0.1 SUSE Linux Enterprise Server 15 SP1 SLES15-SP1-CHOST-BYOS versions prior to 1.0.3

Description A vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user.

Recommendations For SLES15-SP1-CAP-Deployment-BYOS versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. For SLES15-SP1-CHOST-BYOS versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the /etc directory to prevent local attackers from escalating to root.