CVE-2015-0796
02.03.2018, 20:29
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
| Vendor | Product | Version |
|---|---|---|
| opensuse | open_buildservice | 2.4 ≤ 𝑥 < 2.4.8 |
| opensuse | open_buildservice | 2.5 ≤ 𝑥 < 2.5.7 |
| opensuse | open_buildservice | 2.6 ≤ 𝑥 < 2.6.3 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
- CWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.