Vulnerability Description
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Open Buildservice | >= 2.4, < 2.4.8 |
Related Weaknesses (CWE)
References
- https://bugzilla.suse.com/show_bug.cgi?id=941099
- https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc
- https://bugzilla.suse.com/show_bug.cgi?id=941099
- https://github.com/openSUSE/open-build-service/commit/474a3db19498765f0118ba3dbc
FAQ
What is CVE-2015-0796?
CVE-2015-0796 is a vulnerability with a CVSS score of 6.3 (MEDIUM). In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow bui...
How severe is CVE-2015-0796?
CVE-2015-0796 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0796?
Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Open Buildservice.