Vulnerabilidades en openSUSE

81 resultados
Análisis Vexday

O histórico de vulnerabilidades do openSUSE soma 76 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV e ausência total de provas de conceito públicas conhecidas, o que indica um perfil de risco contido no momento. A falha mais comum é do tipo CWE-59 (improper link resolution before file access, ou "link following"), sugerindo atenção a controles de acesso em operações com sistema de arquivos. A CVE mais relevante no radar atual é CVE-2023-22643, com escore EPSS de 0,0245, valor que reflete probabilidade de exploração relativamente baixa em curto prazo, mas que ainda justifica acompanhamento dado ser a única ocorrência de severidade crítica no conjunto. A ausência de novas vulnerabilidades nos últimos 90 dias reforça a estabilidade recente, embora não dispense monitoramento contínuo do CWE-59, que pode representar vetores de escalonamento de privilégios em ambientes Linux.

CVE-2020-8027HIGHopenldap uses fixed paths in /tmpEPSS 0.3%CVE-2021-32000LOWclone-master-clean-up: dangerous file system operationsEPSS 0.3%CVE-2022-21944HIGHwatchman: chown in watchman@.socket unit allows symlink attackEPSS 0.3%CVE-2020-8016MEDIUMrace condition in the packaging of texlive-filesystenEPSS 0.3%CVE-2021-25317LOWcups: ownership of /var/log/cups allows the lp user to create files as rootEPSS 0.3%CVE-2019-18899MEDIUMapt-cacher-ng insecure use of /run/apt-cacher-ngEPSS 0.3%CVE-2022-21946MEDIUMsuddoers configuration for cscreen not restrictive enoughEPSS 0.3%CVE-2021-25319HIGHvirtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers groupEPSS 0.3%CVE-2022-31254HIGHrmt-server-pubcloud allows to escalate from user _rmt to rootEPSS 0.2%CVE-2022-21945MEDIUMcscreen: usage of fixed path /tmp/cscreen.debugEPSS 0.2%CVE-2022-45153HIGHsaphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.slsEPSS 0.2%CVE-2023-32183HIGHIncorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate tEPSS 0.2%CVE-2021-36781MEDIUMparsec: dangerous 777 permissions for /run/parsecEPSS 0.2%CVE-2020-8017MEDIUMrace condition on texlive-filesystem cron job allows for the deletion of unintended filesEPSS 0.2%CVE-2025-53881MEDIUMSUSE-specific logrotate configuration allows escalation from mail user/group to rootEPSS 0.2%CVE-2025-46810HIGHA UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate EPSS 0.2%CVE-2022-21950MEDIUMcanna: unsafe handling of /tmp/.iroha_unix directoryEPSS 0.1%CVE-2022-31252MEDIUMpermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()EPSS 0.1%CVE-2026-25701HIGHAn Insecure Temporary File vulnerability in openSUSE sdbootutil allows local users to pre-create a directory to achieve various effects likeEPSS 0.1%CVE-2019-3700LOWyast: Fallback to DES without configuration in /etc/login.defEPSS 0.1%