Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:3190-1

Опубликовано: 05 дек. 2019
Источник: suse-cvrf

Описание

Security update for munge

This update for munge fixes the following issues:

Security issue fixed:

  • CVE-2019-3691: Fixed a Local privilege escalation vulnerability which allowed escalation from munge to root (bsc#1155075).

Список пакетов

SUSE Linux Enterprise Module for HPC 15
libmunge2-0.5.13-4.3.1
munge-0.5.13-4.3.1
munge-devel-0.5.13-4.3.1
SUSE Linux Enterprise Module for HPC 15 SP1
libmunge2-0.5.13-4.3.1
munge-0.5.13-4.3.1
munge-devel-0.5.13-4.3.1

Ссылки

Описание

A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.

Затронутые продукты
SUSE Linux Enterprise Module for HPC 15 SP1:libmunge2-0.5.13-4.3.1
SUSE Linux Enterprise Module for HPC 15 SP1:munge-0.5.13-4.3.1
SUSE Linux Enterprise Module for HPC 15 SP1:munge-devel-0.5.13-4.3.1
SUSE Linux Enterprise Module for HPC 15:libmunge2-0.5.13-4.3.1
Ссылки
Уязвимость SUSE-SU-2019:3190-1