A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 25, 2021 |
| Suse | — | Upgrade libsasl2-3Upgrade cyrus-sasl-crammd5-32bitUpgrade cyrus-sasl-otpUpgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-plainUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-digestmd5-32bitUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-develUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-plain-32bit | Feb 4, 2022 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub