OpenSUSE Factory

• CVE-2022-31253 High 7.1 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself 0.3%
• CVE-2022-21946 Medium 5.3 suddoers configuration for cscreen not restrictive enough 0.3%
• CVE-2022-21945 Medium 5.1 cscreen: usage of fixed path /tmp/cscreen.debug 0.2%
• CVE-2022-21944 High 7.8 watchman: chown in watchman@.socket unit allows symlink attack 0.3%
• CVE-2021-36781 Medium 5.9 parsec: dangerous 777 permissions for /run/parsec 0.2%
• CVE-2021-32000 Low 3.2 clone-master-clean-up: dangerous file system operations 0.3%
• CVE-2021-25321 High 7.8 arpwatch: Local privilege escalation from runtime user to root 0.4%
• CVE-2021-25322 Medium 6.8 python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root 0.4%
• CVE-2021-31997 Medium 6.8 python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root 0.3%
• CVE-2021-25317 Low 3.3 cups: ownership of /var/log/cups allows the lp user to create files as root 0.3%
• CVE-2021-25319 High 7.8 virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group 0.3%
• CVE-2020-8032 Medium 6.7 Local privilege escalation to root due to insecure tmp file usage 0.4%
• CVE-2020-8015 High 8.4 Local privilege escalation in exim package from user mail to root 0.5%