CVE-2018-19637: Opensuse Supportutils

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supp_log, allowing local attackers to overwrite files on systems without symlink protection

Affected products

• Opensuse Supportutils: before 3.1-5.7.1 (fixed in 3.1-5.7.1)

Published 2019-03-05. Last modified 2026-06-17.