CVE-2016-5759
Fixed in a distro release EPSS <1%
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
Products: novell suse_linux_enterprise_desktop, novell suse_linux_enterprise_server, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Desktop 12 SP1 | kdump | 0.8.15-29.1 |
| SUSE Linux Enterprise Server 12 SP1 | kdump | 0.8.15-29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kdump | 0.8.15-29.1 |
| openSUSE Tumbleweed | kdump | 0.9.1-3.2 |