Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0084-1

Опубликовано: 12 янв. 2021
Источник: suse-cvrf

Описание

Security update for crmsh

This update for crmsh fixes the following issue:

  • CVE-2020-35459: Fixed a privilege escalation in hawk_invoke (bsc#1179999).

Список пакетов

SUSE Linux Enterprise High Availability Extension 12 SP3
crmsh-3.0.4+git.1607490926.e492f845-13.56.1
crmsh-scripts-3.0.4+git.1607490926.e492f845-13.56.1

Ссылки

Описание

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.

Затронутые продукты
SUSE Linux Enterprise High Availability Extension 12 SP3:crmsh-3.0.4+git.1607490926.e492f845-13.56.1
SUSE Linux Enterprise High Availability Extension 12 SP3:crmsh-scripts-3.0.4+git.1607490926.e492f845-13.56.1
Ссылки