5.5

CVE-2024-22034

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorSUSE
≫
Product SUSE Linux Enterprise Desktop 15 SP5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise High Performance Computing 15 SP5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Module for Development Tools 15 SP5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server 15 SP5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server for SAP Applications 15 SP5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Desktop 15 SP6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise High Performance Computing 15 SP6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Module for Development Tools 15 SP6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server 15 SP6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server for SAP Applications 15 SP6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server 12 SP5
Default Statusunaffected
Version < 0.183.0-15.18.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Server for SAP Applications 12 SP5
Default Statusunaffected
Version < 0.183.0-15.18.1
Version ?
Status affected
VendorSUSE
≫
Product SUSE Linux Enterprise Software Development Kit 12 SP5
Default Statusunaffected
Version < 0.183.0-15.18.1
Version ?
Status affected
VendorSUSE
≫
Product openSUSE Leap 15.5
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product openSUSE Leap 15.6
Default Statusunaffected
Version < 1.9.0-150400.10.6.1
Version ?
Status affected
VendorSUSE
≫
Product openSUSE Tumbleweed
Default Statusunaffected
Version < 1.9.0-1.1
Version ?
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.054
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
meissner@suse.de 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N