Log in Start free

Vulnerability · Published Sep 19, 2023 · Assigned by suse

CVE-2023-32182

Medium 5.9

In plain English

A medium-severity security flaw in openSUSE Leap 15.5 from SUSE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).

Severity (CVSS 3.1)5.9Medium
Exploit odds (30 days)0.3%top 77.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 postfix, SUSE openSUSE Leap 15.5 postfix.This issue affects SUSE Linux Enterprise Desktop 15 SP5: before 3.7.3-150500.3.5.1; SUSE Linux Enterprise High Performance Computing 15 SP5: before 3.7.3-150500.3.5.1; openSUSE Leap 15.5 : before 3.7.3-150500.3.5.1.

Affected products (as reported)

VendorProductVersions
SUSE SUSE Linux Enterprise Desktop 15 SP5 ? – before 3.7.3-150500.3.5.1
SUSE SUSE Linux Enterprise High Performance Computing 15 SP5 ? – before 3.7.3-150500.3.5.1
SUSE openSUSE Leap 15.5 ? – before 3.7.3-150500.3.5.1

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

References