Upstream information
Description
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
National Vulnerability Database | |
---|---|
Base Score | 7.2 |
Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Access Vector | Local |
Access Complexity | Low |
Authentication | None |
Confidentiality Impact | Complete |
Integrity Impact | Complete |
Availability Impact | Complete |
National Vulnerability Database | |
---|---|
Base Score | 7.8 |
Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Access Vector | Local |
Access Complexity | Low |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | High |
Integrity Impact | High |
Availability Impact | High |
- openSUSE-SU-2017:1343-1, published Thu, 18 May 2017 21:11:51 +0200 (CEST)
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
openSUSE Leap 42.2 |
| Patchnames: openSUSE-2017-595 |