Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2019-18899

apt-cacher-ng insecure use of /run/apt-cacher-ng

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openSUSE Leap 15.1

  • apt-cacher-ng to < 3.1-lp151.3.3.1affected

References