libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libosinfo | Nov 8, 2019 | Jul 5, 2019 |
| Amazon Linux Ami 2 | — | Upgrade libosinfo-debuginfoUpgrade libosinfo-develUpgrade libosinfoUpgrade libosinfo-vala | Oct 28, 2020 | Jul 5, 2019 |
| Centos_linux | — | Upgrade osinfo-dbUpgrade gnome-boxesUpgrade osinfo-db-toolsUpgrade libosinfo-debugsourceUpgrade osinfo-db-tools-debugsourceUpgrade gnome-boxes-debuginfoUpgrade osinfo-db-tools-debuginfoUpgrade libosinfo-develUpgrade libosinfoUpgrade libosinfo-debuginfoUpgrade libosinfo-valaUpgrade gnome-boxes-debugsource | Nov 6, 2019 | Jul 5, 2019 |
| Debian | — | Upgrade libosinfo | Jul 30, 2024 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libosinfo | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libosinfo | Sep 25, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libosinfo | Sep 12, 2019 | Jul 5, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libosinfo | Aug 28, 2019 | Jul 5, 2019 |
| Oracle_linux | — | Upgrade gnome-boxesUpgrade osinfo-dbUpgrade osinfo-db-toolsUpgrade libosinfoUpgrade libosinfo-develUpgrade libosinfo-vala | Oct 5, 2022 | Jul 5, 2019 |
| Redhat_linux | — | Upgrade osinfo-db-toolsUpgrade gnome-boxes-debuginfoUpgrade gnome-boxes-debugsourceUpgrade libosinfo-debugsourceUpgrade osinfo-dbUpgrade osinfo-db-tools-debuginfoUpgrade gnome-boxesUpgrade libosinfoUpgrade osinfo-db-tools-debugsourceUpgrade libosinfo-debuginfoUpgrade libosinfo-valaUpgrade libosinfo-devel | Nov 6, 2019 | Jul 5, 2019 |
| Suse | — | Upgrade libosinfo-langUpgrade libosinfo-develUpgrade libosinfoUpgrade typelib-1_0-Libosinfo-1_0Upgrade libosinfo-1_0-0 | Sep 5, 2019 | Jul 5, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub