← voltar
CVE-2021-46705

grub2-once uses fixed file name in /var/tmp

CVSS 5.1 MEDIUMEPSS 0.2%CWE-377
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →