VULNERABILITY INTELLIGENCE
CVE-2018-17955
CVSS score2.2 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2019-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Description
In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
- CWE-377: Insecure Temporary File