Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2018-19636

Local root exploit via inclusion of attacker controlled shell script

Description

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE supportutils

  • unspecified to < 3.1-5.7.1affected

References