A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows local users in group mktex to delete arbitrary files on the system This issue affects: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 texlive-filesystem versions prior to 2017.135-9.5.1. SUSE Linux Enterprise Software Development Kit 12-SP4 texlive-filesystem versions prior to 2013.74-16.5.1. SUSE Linux Enterprise Software Development Kit 12-SP5 texlive-filesystem versions prior to 2013.74-16.5.1. openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade texlive-cjkutils-binUpgrade texlive-metapost-binUpgrade texlive-collection-formatsextraUpgrade texlive-crossrefware-binUpgrade texlive-cslatex-binUpgrade texlive-latex2nemeth-binUpgrade texlive-srcredact-binUpgrade texlive-collection-mathscienceUpgrade texlive-dvidvi-binUpgrade texlive-texdirflatten-binUpgrade texlive-metafont-binUpgrade texlive-tex4ht-binUpgrade texlive-sty2dtx-binUpgrade texlive-pkfix-binUpgrade libkpathsea6Upgrade texlive-mkjobtexmf-binUpgrade texlive-collection-binextraUpgrade texlive-collection-langspanishUpgrade texlive-latex2man-binUpgrade texlive-collection-metapostUpgrade texlive-scheme-smallUpgrade texlive-dvisvgm-binUpgrade texlive-cachepic-binUpgrade texlive-collection-fontsrecommendedUpgrade texlive-lilyglyphs-binUpgrade texlive-develUpgrade texlive-collection-humanitiesUpgrade libsynctex1Upgrade texlive-pmx-binUpgrade texlive-yplan-binUpgrade texlive-fontware-binUpgrade texlive-collection-fontsextraUpgrade texlive-gsftopk-binUpgrade texlive-musixtex-binUpgrade texlive-texdiff-binUpgrade texlive-ps2pk-binUpgrade texlive-collection-langeuropeanUpgrade texlive-synctex-develUpgrade texlive-checklistings-binUpgrade texlive-latexpand-binUpgrade texlive-pdfjam-binUpgrade texlive-convbkmk-binUpgrade texlive-collection-langjapaneseUpgrade texlive-tex4ebook-binUpgrade texlive-collection-bibtexextraUpgrade texlive-collection-langchineseUpgrade texlive-pkfix-helper-binUpgrade texlive-dvicopy-binUpgrade texlive-latexdiff-binUpgrade texlive-findhyph-binUpgrade texlive-lcdftypetools-binUpgrade texlive-collection-langkoreanUpgrade texlive-ctanify-binUpgrade texlive-eplain-binUpgrade texlive-detex-binUpgrade texlive-collection-langitalianUpgrade texlive-adhocfilelist-binUpgrade texlive-collection-htmlxmlUpgrade texlive-mf2pt1-binUpgrade texlive-kpathsea-develUpgrade texlive-collection-langgreekUpgrade texlive-xetex-binUpgrade texlive-listings-ext-binUpgrade texlive-pdflatexpicscale-binUpgrade texlive-pygmentex-binUpgrade texlive-dviljk-binUpgrade texlive-uplatex-binUpgrade texlive-afm2pl-binUpgrade texlive-collection-latexrecommendedUpgrade texlive-scheme-basicUpgrade texlive-collection-langcyrillicUpgrade texlive-dtl-binUpgrade texlive-ptex-fontmaps-binUpgrade texlive-lua2dox-binUpgrade texlive-texloganalyser-binUpgrade texlive-collection-langportugueseUpgrade texlive-ptex-binUpgrade texlive-bundledoc-binUpgrade perl-biberUpgrade texlive-multibibliography-binUpgrade texlive-aleph-binUpgrade texlive-scheme-tetexUpgrade texlive-bibtexu-binUpgrade texlive-uptex-binUpgrade texlive-pst2pdf-binUpgrade texlive-collection-publishersUpgrade texlive-scheme-fullUpgrade texlive-dvipdfmx-binUpgrade texlive-xmltex-binUpgrade texlive-texdoc-binUpgrade texlive-latex-bin-binUpgrade texlive-svn-multi-binUpgrade texlive-latex-git-log-binUpgrade texlive-tpic2pdftex-binUpgrade texlive-ulqda-binUpgrade texlive-amstex-binUpgrade texlive-collection-gamesUpgrade texlive-collection-fontutilsUpgrade texlive-checkcites-binUpgrade texlive-asymptote-binUpgrade libptexenc1Upgrade texlive-dtxgen-binUpgrade texlive-pst-pdf-binUpgrade texlive-collection-xetexUpgrade texlive-gregoriotex-binUpgrade texlive-kpathsea-binUpgrade texlive-collection-langarabicUpgrade texlive-pdftools-binUpgrade texlive-fontools-binUpgrade texlive-texdef-binUpgrade texlive-luatex-binUpgrade texlive-pmxchords-binUpgrade texlive-ctie-binUpgrade texlive-diadia-binUpgrade texlive-fig4latex-binUpgrade texlive-latexfileversion-binUpgrade texlive-pfarrei-binUpgrade texlive-texconfig-binUpgrade texlive-texliveonfly-binUpgrade texlive-epspdf-binUpgrade libtexlua52-5Upgrade texlive-mex-binUpgrade texlive-collection-langgermanUpgrade texlive-collection-contextUpgrade texlive-cyrillic-bin-binUpgrade texlive-dvips-binUpgrade texlive-mflua-binUpgrade texlive-collection-langpolishUpgrade texlive-de-macro-binUpgrade texlive-authorindex-binUpgrade texlive-collection-langotherUpgrade texlive-perltex-binUpgrade texlive-scheme-mediumUpgrade texlive-splitindex-binUpgrade texlive-ltximg-binUpgrade texlive-pythontex-binUpgrade texlive-seetexk-binUpgrade texlive-velthuis-binUpgrade texlive-texware-binUpgrade texlive-mkpic-binUpgrade texlive-pax-binUpgrade texlive-dvipng-binUpgrade texlive-collection-latexUpgrade texlive-dviinfox-binUpgrade texlive-collection-luatexUpgrade texlive-cjk-gs-integrate-binUpgrade texlive-dosepsbin-binUpgrade texlive-xdvi-binUpgrade texlive-texosquery-binUpgrade texlive-texsis-binUpgrade texlive-luaotfload-binUpgrade texlive-texlua-develUpgrade texlive-epstopdf-binUpgrade texlive-ptex2pdf-binUpgrade texlive-getmap-binUpgrade texlive-tex-binUpgrade texlive-accfonts-binUpgrade texlive-makeindex-binUpgrade texlive-collection-picturesUpgrade texlive-pdfcrop-binUpgrade texlive-listbib-binUpgrade texlive-dviasm-binUpgrade texlive-scheme-gustUpgrade texlive-vlna-binUpgrade texlive-texluajit-develUpgrade texlive-pstools-binUpgrade texlive-make4ht-binUpgrade texlive-glossaries-binUpgrade texlive-scheme-contextUpgrade texlive-lacheck-binUpgrade texlive-extratoolsUpgrade texlive-fontinst-binUpgrade texlive-ttfutils-binUpgrade texlive-collection-langcjkUpgrade texlive-filesystemUpgrade texlive-collection-langczechslovakUpgrade texlive-platex-binUpgrade texlive-arara-binUpgrade texlive-tetex-binUpgrade texlive-cweb-binUpgrade texlive-ctanupload-binUpgrade texlive-mkgrkindex-binUpgrade texlive-latexmk-binUpgrade texlive-urlbst-binUpgrade texlive-bibtex-binUpgrade texlive-petri-nets-binUpgrade texlive-m-tx-binUpgrade texlive-exceltex-binUpgrade texlive-collection-musicUpgrade texlive-autosp-binUpgrade texlive-kotex-utils-binUpgrade texlive-pedigree-perl-binUpgrade texlive-scheme-infraonlyUpgrade texlive-chktex-binUpgrade texlive-collection-pstricksUpgrade texlive-vpe-binUpgrade texlive-collection-basicUpgrade texlive-bin-develUpgrade texlive-a2ping-binUpgrade texlive-ebong-binUpgrade texlive-ptexenc-develUpgrade texliveUpgrade texlive-latexindent-binUpgrade texlive-bibexport-binUpgrade texlive-synctex-binUpgrade texlive-mfware-binUpgrade texlive-lwarp-binUpgrade texlive-bibtex8-binUpgrade texlive-lollipop-binUpgrade texlive-match_parens-binUpgrade texlive-latex-papersize-binUpgrade texlive-pdfbook2-binUpgrade texlive-mltex-binUpgrade texlive-makedtx-binUpgrade texlive-collection-langfrenchUpgrade texlive-collection-langenglishUpgrade texlive-context-binUpgrade texlive-patgen-binUpgrade texlive-mathspic-binUpgrade texlive-pdftex-binUpgrade texlive-scheme-minimalUpgrade texlive-rubik-binUpgrade texlive-collection-latexextraUpgrade texlive-collection-plaingenericUpgrade texlive-ltxfileinfo-binUpgrade texlive-tie-binUpgrade texlive-jadetex-binUpgrade texlive-texfot-binUpgrade texlive-thumbpdf-binUpgrade texlive-web-binUpgrade texlive-texcount-binUpgrade texlive-csplain-binUpgrade texlive-purifyeps-binUpgrade texlive-musixtnt-binUpgrade texlive-mptopdf-binUpgrade libtexluajit2Upgrade texlive-fragmaster-binUpgrade texlive-dvipos-binUpgrade texlive-typeoutfileinfo-binUpgrade texlive-omegaware-binUpgrade texlive-biber-binUpgrade texlive-pdfxup-bin | Jun 10, 2020 | Apr 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub