SUSE · weakness class
File and Path Handling
45 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.
- Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
- post-auth arbitrary file write on cryptctl server
- package builds could use directory traversal to write outside of target area
- osc: stores downloaded (supposed) RPM in network-controlled filesystem paths
- obs-service-extract_file's outfilename parameter allows to write files outside of package directory
- local privilege escalation in SUSE postgresql init script
- SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
- open build service source server symlink exploitation via source patch
- SUMA/UYUNI directory path traversal vulnerability in CobblerSnipperViewAction
- nagios cron job allows privilege escalation from user nagios to root
- Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern
- Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
- daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root
- libzypp path traversal via "keyhint" in repomd.xml
- syslog-ng: Local privilege escalation from new to root in %post
- Local privilege escalation from user munge to root
- Local privilege escalation from user news to root in the packaging of inn
- Path Traversal in Rancher Fleet ImageScan GitRepo Path Handler
- trousers: Local privilege escalation from tss to root
- pcp: Local privilege escalation from user pcp to root through migrate_tempdirs
- Static temporary filename allows overwriting of files
- arpwatch: Local privilege escalation from runtime user to root
- chkstat follows untrusted symbolic links
- libzypp .repo files can have an optional path which can lead to path traversal attacks
- User can overwrite arbitrary log files in support tar
- Local privilege escalation from user salt to root
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.