CVE-2018-19638: Opensuse Supportutils

Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days.

In supportutils, before version 3.1-5.7.1 and if pacemaker is installed on the system, an unprivileged user could have overwritten arbitrary files in the directory that is used by supportutils to collect the log files.

Affected products

• Opensuse Supportutils: before 3.1-5.7.1 (fixed in 3.1-5.7.1)

Published 2019-03-05. Last modified 2026-06-17.