8.5
Élevée
CVE-2023-32190 mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file…
Description
mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| openSUSE Tumbleweed 0.26 | premières → < 0.26-37.1 | 0.26-37.1 |
| opensuse_tumbleweed 0.26 | premières → < 0.26-37.1 | 0.26-37.1 |
Autres CVE de openSUSE Tumbleweed
Les 13 CVE de openSUSE Tumbleweed →
CVE-2026-44950
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer
9.0
Critique
CVE-2026-59679
fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array…
9.0
Critique
CVE-2026-59674
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata…
7.1
Élevée
CVE-2026-41051
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the…
5.1
Moyenne