CVE-2015-0796

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.88%

Published

Mar 2, 2018

Modified

Nov 20, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.

Weaknesses (CWE)

CWE-434CWE-59

Affected Products (3)

opensuse · open_buildservice (up to 2.4.8)vulnerable

opensuse · open_buildservice (up to 2.5.7)vulnerable

opensuse · open_buildservice (up to 2.6.3)vulnerable

References (4)

https://bugzilla.suse.com/show_bug.cgi?id=941099

https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc

https://bugzilla.suse.com/show_bug.cgi?id=941099

https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc0b1cc90b0097fc

KEV Catalog EPSS Scores Vendors All CVEs