Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-18899

Опубликовано: 23 янв. 2020
Источник: nvd
CVSS3: 6.2
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:apt-cacher-ng_project:apt-cacher-ng:*:*:*:*:*:*:*:*
Версия до 3.1-lp151.3.3.1 (исключая)
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:opensuse:backports:sle-15:sp1:*:*:*:*:*:*

EPSS

Процентиль: 31%
0.0012
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-269
CWE-269

Связанные уязвимости

ubuntu логотип

CVE-2019-18899

CVSS3: 6.2
ubuntu
около 6 лет назад

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.

debian логотип

CVE-2019-18899

CVSS3: 6.2
debian
около 6 лет назад

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in use ...

github логотип

GHSA-fv3j-23hh-g3xf

CVSS3: 5.5
github
больше 3 лет назад

The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges. This can allow local attackers to influence the outcome of these operations. This issue affects: openSUSE Leap 15.1 apt-cacher-ng versions prior to 3.1-lp151.3.3.1.

suse-cvrf логотип

openSUSE-SU-2020:0124-1

suse-cvrf
около 6 лет назад

Security update for apt-cacher-ng

EPSS

Процентиль: 31%
0.0012
Низкий

6.2 Medium

CVSS3

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-269
CWE-269