Skip to content
CVE PROGRAM SOURCE RECORD2.8 Low

CVE-2018-19637

Static temporary filename allows overwriting of files

Description

Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE supportutils

  • unspecified to < 3.1-5.7.1affected

References