openSUSE Tumbleweed vulnerabilities
4 known vulnerabilities in openSUSE Tumbleweed from SUSE. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
openSUSE Tumbleweed: UNIX Symbolic Link (Symlink) Following
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1.
- 9.8 Critical severity
openSUSE Tumbleweed: UNIX Symbolic Link (Symlink) Following
A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1.
- 7.8 High severity
openSUSE Tumbleweed: Incorrect Default Permissions
A Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed package gerbera allows the service user gerbera to escalate to root.,This issue affects gerbera on openSUSE Tumbleweed before 2.5.0-1.1.
- 8.5 High severity
openSUSE Tumbleweed: Out-of-bounds Read
mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges.