CVE-2018-19638 User can overwrite arbitrary log files in support tar
An unprivileged user can overwrite arbitrary log files in supportutils if pacemaker is installed, potentially compromising system logs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-19638?
CVE-2018-19638 is a low-severity path traversal vulnerability in SUSE supportutils, published on 5 Mar 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.
Which versions are affected by CVE-2018-19638?
It affects 1 product.
Products include Opensuse Supportutils.
How do I fix CVE-2018-19638?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-19638 being exploited?
There is no known exploitation of CVE-2018-19638 in the wild and no public exploit code.
Other vulnerabilities in SUSE supportutils
- CVE-2018-19636 Local root exploit via inclusion of attacker controlled shell script
- CVE-2018-19639 Code execution if run with command line switch -v
- CVE-2022-45154 supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
- CVE-2018-19640 Code execution if run with command line switch -v
- CVE-2018-19637 Static temporary filename allows overwriting of files
Sources
Also known as GHSA-8w66-9hvh-6jfx.