Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-12476

Fixed in a distro release EPSS 1%CVSS 4.3

Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.

Published 2020-01-27 · CVE record · OSV

Products: SUSE Linux Enterprise Server 15, openSUSE Factory

Distro releases

ReleasePackageFixed in
SUSE Package Hub 15obs-service-tar_scm0.10.5.1551309990.79898c7-bp150.3.3.1
openSUSE Leap 15.0obs-service-tar_scm0.10.5.1551309990.79898c7-lp150.2.3.1
openSUSE Tumbleweedobs-service-tar_scm0.10.28.1632141620.a8837d3-1.1