libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libosinfo | Nov 8, 2019 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libosinfo-develUpgrade libosinfo-valaUpgrade libosinfoUpgrade libosinfo-debuginfo | Oct 28, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade libosinfo-develUpgrade libosinfo-valaUpgrade libosinfoUpgrade libosinfo-debuginfoUpgrade gnome-boxes-debugsourceUpgrade osinfo-dbUpgrade gnome-boxesUpgrade libosinfo-debugsourceUpgrade osinfo-db-toolsUpgrade osinfo-db-tools-debugsourceUpgrade gnome-boxes-debuginfoUpgrade osinfo-db-tools-debuginfo | Nov 6, 2019 | Jul 5, 2019 |
| Debian | — | Upgrade libosinfo | Jul 30, 2024 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libosinfo | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libosinfo | Sep 25, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libosinfo | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libosinfo | Aug 28, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade libosinfo-develUpgrade libosinfo-valaUpgrade gnome-boxesUpgrade osinfo-dbUpgrade libosinfoUpgrade osinfo-db-tools | Oct 5, 2022 | Jul 5, 2019 |
| Redhat_linux | — | Upgrade gnome-boxesUpgrade gnome-boxes-debuginfoUpgrade libosinfo-debugsourceUpgrade gnome-boxes-debugsourceUpgrade osinfo-db-tools-debuginfoUpgrade osinfo-dbUpgrade osinfo-db-toolsUpgrade libosinfo-develUpgrade libosinfo-debuginfoUpgrade libosinfo-valaUpgrade libosinfoUpgrade osinfo-db-tools-debugsource | Nov 6, 2019 | Jul 5, 2019 |
| Suse | — | Upgrade libosinfo-1_0-0Upgrade libosinfoUpgrade libosinfo-develUpgrade typelib-1_0-Libosinfo-1_0Upgrade libosinfo-lang | Sep 5, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub