A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users to corrupt files or potentially escalate privileges. This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade texlive-exceltex-binUpgrade texlive-pstools-binUpgrade texlive-pkfix-binUpgrade texlive-ctanupload-binUpgrade texlive-cachepic-binUpgrade texlive-pkfix-helper-binUpgrade texlive-scheme-minimalUpgrade texlive-synctex-binUpgrade texlive-a2ping-binUpgrade texlive-collection-musicUpgrade texlive-collection-langjapaneseUpgrade texlive-typeoutfileinfo-binUpgrade texlive-bibexport-binUpgrade texlive-glossaries-binUpgrade texlive-ptex2pdf-binUpgrade texlive-filesystemUpgrade libtexluajit2Upgrade texlive-petri-nets-binUpgrade texlive-dvipos-binUpgrade texlive-listbib-binUpgrade texlive-m-tx-binUpgrade texlive-epstopdf-binUpgrade texlive-luatex-binUpgrade texlive-convbkmk-binUpgrade texlive-collection-bibtexextraUpgrade texlive-dvicopy-binUpgrade texlive-csplain-binUpgrade texlive-context-binUpgrade texlive-ltximg-binUpgrade texlive-tex4ht-binUpgrade texlive-mkpic-binUpgrade texlive-mkgrkindex-binUpgrade texlive-collection-langportugueseUpgrade texlive-authorindex-binUpgrade texlive-texcount-binUpgrade texlive-tex4ebook-binUpgrade texlive-scheme-contextUpgrade texlive-tex-binUpgrade texlive-crossrefware-binUpgrade texlive-dviinfox-binUpgrade texlive-latex-papersize-binUpgrade texlive-pythontex-binUpgrade texlive-scheme-gustUpgrade texlive-dviljk-binUpgrade texlive-rubik-binUpgrade texlive-eplain-binUpgrade texlive-pdflatexpicscale-binUpgrade texlive-lacheck-binUpgrade texlive-texluajit-develUpgrade texlive-collection-fontsextraUpgrade texlive-purifyeps-binUpgrade texlive-collection-pstricksUpgrade texlive-patgen-binUpgrade texlive-fragmaster-binUpgrade texlive-lua2dox-binUpgrade texlive-findhyph-binUpgrade texlive-omegaware-binUpgrade texlive-arara-binUpgrade texlive-collection-langfrenchUpgrade texlive-mex-binUpgrade texlive-collection-htmlxmlUpgrade texlive-collection-picturesUpgrade texlive-tetex-binUpgrade texlive-collection-basicUpgrade texlive-lilyglyphs-binUpgrade texlive-cyrillic-bin-binUpgrade texlive-srcredact-binUpgrade texlive-collection-langarabicUpgrade texlive-extratoolsUpgrade texlive-ptexenc-develUpgrade texlive-diadia-binUpgrade texlive-latex-git-log-binUpgrade texlive-pdfcrop-binUpgrade texlive-makedtx-binUpgrade texlive-perltex-binUpgrade texlive-collection-latexextraUpgrade texlive-lollipop-binUpgrade texlive-texloganalyser-binUpgrade texlive-vlna-binUpgrade texlive-dvipng-binUpgrade texlive-bibtexu-binUpgrade texlive-collection-langenglishUpgrade texlive-dvidvi-binUpgrade texlive-thumbpdf-binUpgrade texlive-develUpgrade texlive-platex-binUpgrade texlive-dosepsbin-binUpgrade texlive-pst2pdf-binUpgrade texlive-collection-langczechslovakUpgrade texlive-collection-langcyrillicUpgrade texlive-make4ht-binUpgrade libtexlua52-5Upgrade texlive-ptex-fontmaps-binUpgrade texlive-pdfbook2-binUpgrade texlive-collection-langgreekUpgrade texlive-adhocfilelist-binUpgrade texlive-mkjobtexmf-binUpgrade texlive-seetexk-binUpgrade texlive-xdvi-binUpgrade texlive-texlua-develUpgrade texlive-pst-pdf-binUpgrade texlive-latex-bin-binUpgrade texlive-uptex-binUpgrade texlive-splitindex-binUpgrade texlive-collection-fontutilsUpgrade texlive-scheme-smallUpgrade texlive-scheme-basicUpgrade texlive-pmxchords-binUpgrade texlive-latexindent-binUpgrade texlive-collection-latexrecommendedUpgrade texlive-web-binUpgrade texlive-amstex-binUpgrade texlive-cjkutils-binUpgrade texlive-bibtex8-binUpgrade texlive-detex-binUpgrade texlive-pdfxup-binUpgrade texlive-collection-publishersUpgrade texlive-collection-fontsrecommendedUpgrade texlive-xetex-binUpgrade texlive-collection-formatsextraUpgrade texlive-pmx-binUpgrade texlive-metapost-binUpgrade texlive-latexfileversion-binUpgrade texlive-collection-latexUpgrade texlive-collection-langpolishUpgrade texlive-autosp-binUpgrade texlive-collection-binextraUpgrade texlive-bin-develUpgrade texlive-scheme-mediumUpgrade texlive-lwarp-binUpgrade texlive-luaotfload-binUpgrade texlive-cjk-gs-integrate-binUpgrade texlive-mflua-binUpgrade texlive-cslatex-binUpgrade perl-biberUpgrade texlive-texdirflatten-binUpgrade texlive-tie-binUpgrade texlive-scheme-infraonlyUpgrade texlive-metafont-binUpgrade texlive-jadetex-binUpgrade texlive-tpic2pdftex-binUpgrade texlive-match_parens-binUpgrade texlive-dvips-binUpgrade texlive-chktex-binUpgrade texlive-musixtnt-binUpgrade texlive-biber-binUpgrade texlive-urlbst-binUpgrade texlive-pygmentex-binUpgrade texlive-dvisvgm-binUpgrade texlive-kpathsea-develUpgrade texlive-collection-gamesUpgrade texliveUpgrade libptexenc1Upgrade texlive-ulqda-binUpgrade texlive-texdiff-binUpgrade texlive-scheme-tetexUpgrade texlive-ltxfileinfo-binUpgrade texlive-mltex-binUpgrade texlive-mathspic-binUpgrade libsynctex1Upgrade texlive-ps2pk-binUpgrade texlive-latex2man-binUpgrade texlive-texconfig-binUpgrade texlive-fig4latex-binUpgrade texlive-collection-langgermanUpgrade texlive-bundledoc-binUpgrade texlive-accfonts-binUpgrade texlive-texsis-binUpgrade texlive-kotex-utils-binUpgrade texlive-ctie-binUpgrade texlive-pdftex-binUpgrade texlive-collection-langeuropeanUpgrade texlive-pdftools-binUpgrade texlive-latex2nemeth-binUpgrade texlive-makeindex-binUpgrade texlive-pedigree-perl-binUpgrade texlive-gregoriotex-binUpgrade texlive-vpe-binUpgrade libkpathsea6Upgrade texlive-xmltex-binUpgrade texlive-collection-contextUpgrade texlive-pdfjam-binUpgrade texlive-velthuis-binUpgrade texlive-scheme-fullUpgrade texlive-texdoc-binUpgrade texlive-dviasm-binUpgrade texlive-collection-langspanishUpgrade texlive-epspdf-binUpgrade texlive-collection-langotherUpgrade texlive-musixtex-binUpgrade texlive-fontinst-binUpgrade texlive-yplan-binUpgrade texlive-ebong-binUpgrade texlive-mptopdf-binUpgrade texlive-latexpand-binUpgrade texlive-aleph-binUpgrade texlive-multibibliography-binUpgrade texlive-lcdftypetools-binUpgrade texlive-checkcites-binUpgrade texlive-fontools-binUpgrade texlive-uplatex-binUpgrade texlive-svn-multi-binUpgrade texlive-ptex-binUpgrade texlive-afm2pl-binUpgrade texlive-asymptote-binUpgrade texlive-fontware-binUpgrade texlive-collection-mathscienceUpgrade texlive-sty2dtx-binUpgrade texlive-ctanify-binUpgrade texlive-texosquery-binUpgrade texlive-listings-ext-binUpgrade texlive-getmap-binUpgrade texlive-latexmk-binUpgrade texlive-texware-binUpgrade texlive-pfarrei-binUpgrade texlive-collection-plaingenericUpgrade texlive-kpathsea-binUpgrade texlive-texliveonfly-binUpgrade texlive-synctex-develUpgrade texlive-mfware-binUpgrade texlive-collection-humanitiesUpgrade texlive-ttfutils-binUpgrade texlive-dtxgen-binUpgrade texlive-collection-xetexUpgrade texlive-texdef-binUpgrade texlive-collection-metapostUpgrade texlive-checklistings-binUpgrade texlive-pax-binUpgrade texlive-mf2pt1-binUpgrade texlive-texfot-binUpgrade texlive-latexdiff-binUpgrade texlive-dvipdfmx-binUpgrade texlive-collection-langkoreanUpgrade texlive-collection-langitalianUpgrade texlive-de-macro-binUpgrade texlive-collection-langchineseUpgrade texlive-gsftopk-binUpgrade texlive-collection-langcjkUpgrade texlive-cweb-binUpgrade texlive-collection-luatexUpgrade texlive-dtl-binUpgrade texlive-bibtex-bin | Jun 10, 2020 | Apr 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub