Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-20106
HistoryMar 15, 2019 - 8:29 p.m.

Code injection

2019-03-1520:29:00
PRIOn knowledge base
www.prio-n.com

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

In yast2-printer up to and including version 4.0.2 the SMB printer settings don’t escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.

CPENameOperatorVersion
yast2-printerle4.0.2

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

Related for PRION:CVE-2018-20106