CVE-2019-18898
Fixed in a distro release EPSS <1%CVSS 7.7
UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.
Products: SUSE Linux Enterprise Server 15 SP1, openSUSE Factory
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | trousers | 0.3.14-6.3.1 |
| openSUSE Leap 15.1 | trousers | 0.3.14-lp151.4.3.1 |
| openSUSE Leap 15.1 | trousers | 0.3.14-lp151.4.6.1 |
| openSUSE Tumbleweed | trousers | 0.3.15-1.7 |