CVE-2018-15912

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.79%

Published

Aug 29, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system.

Weaknesses (CWE)

CWE-269

Affected Products (1)

manjaro · manjaro_linuxvulnerable

References (4)

https://gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8a

PatchThird Party Advisory

https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html

ExploitMailing ListVendor Advisory

https://gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8a

PatchThird Party Advisory

https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html

ExploitMailing ListVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs