opensuse supportutils
productUScpe:2.3:a:opensuse:supportutils:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical2high4medium0low
updated 2026-10-30
01
vulnerabilities (6)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2018-19639US | high7.8 | — | ||||
If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute… | ||||||
| CVE-2018-19637US | medium5.5 | — | ||||
Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection | ||||||
| CVE-2018-19638US | medium4.7 | — | ||||
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by… | ||||||
| CVE-2018-19636US | high7.8OT elevated | — | ||||
Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location i… | ||||||
| CVE-2018-19640US | medium5.5 | — | ||||
If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary process… | ||||||
| CVE-2022-45154US | medium5.5OT elevated | — | ||||
A Cleartext Storage of Sensitive Information vulnerability in suppportutils of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 15 SP3… | ||||||
02
weaknesses (6)
The flaw types (CWEs) most of these CVEs share.
- CWE-377DEPRECATED: Insecure Temporary File3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-59Improper Link Resolution Before File Access2 CVEs
- CWE-306Missing Authentication for Critical Functionality1 CVEs
- CWE-312Cleartext Storage of Sensitive Information1 CVEs
- CWE-78Improper Neutralization of Special Elements used in an OS Command1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE6 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan