A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade cyrus-sasl | Mar 26, 2024 | Feb 25, 2021 |
| Suse | — | Upgrade cyrus-sasl-gssapiUpgrade cyrus-saslUpgrade cyrus-sasl-gssapi-32bitUpgrade cyrus-sasl-crammd5-32bitUpgrade libsasl2-3Upgrade cyrus-sasl-otpUpgrade cyrus-sasl-plainUpgrade libsasl2-3-32bitUpgrade cyrus-sasl-crammd5Upgrade cyrus-sasl-digestmd5-32bitUpgrade cyrus-sasl-plain-32bitUpgrade cyrus-sasl-digestmd5Upgrade cyrus-sasl-32bitUpgrade cyrus-sasl-devel | Feb 4, 2022 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub