Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-22034

Crafted projects can overwrite special files in the .osc config directory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
suse

Description

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE SUSE Linux Enterprise Desktop 15 SP5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Module for Development Tools 15 SP5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Desktop 15 SP6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise High Performance Computing 15 SP6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Module for Development Tools 15 SP6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Server 15 SP6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 15 SP6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE SUSE Linux Enterprise Server 12 SP5

Default version status: unaffected

  • ? to < 0.183.0-15.18.1affected

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5

Default version status: unaffected

  • ? to < 0.183.0-15.18.1affected

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5

Default version status: unaffected

  • ? to < 0.183.0-15.18.1affected

SUSE openSUSE Leap 15.5

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE openSUSE Leap 15.6

Default version status: unaffected

  • ? to < 1.9.0-150400.10.6.1affected

SUSE openSUSE Tumbleweed

Default version status: unaffected

  • ? to < 1.9.0-1.1affected

References