vulnerability

SUSE: CVE-2009-0035: SUSE Linux Security Advisory

Severity
4
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:P)
Published
Nov 9, 2019
Added
Aug 9, 2024
Modified
Aug 9, 2024

Description

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts.

Solutions

suse-upgrade-alsasuse-upgrade-alsa-develsuse-upgrade-alsa-docssuse-upgrade-libasound2suse-upgrade-libasound2-32bit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.