CVE-2022-21945: falha de média gravidade em openSUSE Factory
cscreen: usage of fixed path /tmp/cscreen.debug
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.1epss 0.2%
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Produtos afetados
openSUSE · FactoryCVEs relacionadas — openSUSE Factory
No mesmo produto, das mais perigosas para as menos.
CVE-2019-18903HIGHwicked: Use-after-free when receiving invalid DHCP6 IA_PD optionEPSS 2.4%CVE-2019-18902HIGHwicked: Use-after-free when receiving invalid DHCP6 client optionsEPSS 2.4%CVE-2018-12476MEDIUMobs-service-extract_file's outfilename parameter allows to write files outside of package directoryEPSS 1.0%CVE-2019-3698MEDIUMnagios cron job allows privilege escalation from user nagios to rootEPSS 0.7%CVE-2020-8015HIGHLocal privilege escalation in exim package from user mail to rootEPSS 0.5%CVE-2019-3691HIGHLocal privilege escalation from user munge to rootEPSS 0.5%