CVE-2018-12476
obs-service-extract_file's outfilename parameter allows to write files outside of package directory
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.9.2.1537788075.fefaa74:, 0.9.2.1537788075.fefaa74
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.
Timeline
- CVE published
- Record last updated
Affected versions
- SUSE SUSE Linux Enterprise Server 15
From obs-service-tar_scm · fixed in 0.9.2.1537788075.fefaa74:
- openSUSE Factory
From obs-service-tar_scm · fixed in 0.9.2.1537788075.fefaa74