CVE-2019-18898: trousers: Local privilege escalation from tss to root
UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-18898?
CVE-2019-18898 is a vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1 and openSUSE Factory that allows local attackers to escalate privileges.
What is the severity of CVE-2019-18898?
The severity of CVE-2019-18898 is high, with a CVSS score of 7.8.
How does CVE-2019-18898 affect SUSE Linux Enterprise Server 15 SP1?
CVE-2019-18898 affects SUSE Linux Enterprise Server 15 SP1 if the trousers package version is prior to 0.3.14-6.3.1.
How do I fix CVE-2019-18898 on SUSE Linux Enterprise Server 15 SP1?
To fix CVE-2019-18898 on SUSE Linux Enterprise Server 15 SP1, update the trousers package to version 0.3.14-6.3.1 or later.
Are other versions or distributions affected by CVE-2019-18898?
Other versions or distributions, such as openSUSE Factory and openSUSE Leap 15.1, may also be affected depending on the trousers package version.