Read the docs
TI-2018-08962 Aliases CVE-2018-12476GHSA-7vq9-fwhq-w55p

obs-service-extract_file's outfilename parameter allows to write files outside of package directory

Priority LOW 35CWE-23Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.

Why it matters now

EPSS 0.01026 63rd percentileScored 2026-11-07
Fix Fixed SUSE Linux Enterprise Server 15 (SUSE): 0.9.2.1537788075.fefaa74:Factory (openSUSE): 0.9.2.1537788075.fefaa74

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SUSESUSE Linux Enterprise Server 15obs-service-tar_scm to before 0.9.2.1537788075.fefaa74:0.9.2.1537788075.fefaa74:Patch availableCNA
openSUSEFactoryobs-service-tar_scm to before 0.9.2.1537788075.fefaa740.9.2.1537788075.fefaa74Patch availableCNA
  • SUSE Linux Enterprise Server 15 VendorSUSE Affected obs-service-tar_scm to before 0.9.2.1537788075.fefaa74: Fixed in 0.9.2.1537788075.fefaa74: Patch available CNA
  • Factory VendoropenSUSE Affected obs-service-tar_scm to before 0.9.2.1537788075.fefaa74 Fixed in 0.9.2.1537788075.fefaa74 Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:suse:obs-service-tar_scm:*:*:*:*:*:*:*:*before 0.9.2.1537788075.fefaa74VulnerableSUSE
cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:*15Running onSUSE
cpe:2.3:o:suse:opensuse_factory:-:*:*:*:*:*:*:*not specified by NVDRunning onSUSE
  • cpe:2.3:a:suse:obs-service-tar_scm:*:*:*:*:*:*:*:* Versions before 0.9.2.1537788075.fefaa74 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux_enterprise_server:15:*:*:*:*:*:*:* Versions 15 Running on ·SUSE
  • cpe:2.3:o:suse:opensuse_factory:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SUSE

Remediation

  • Fix · CNA SUSE Linux Enterprise Server 15 (SUSE) Fixed in 0.9.2.1537788075.fefaa74:
  • Fix · CNA Factory (openSUSE) Fixed in 0.9.2.1537788075.fefaa74

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-12476
  2. 2026-10-03 Alias added: GHSA-7vq9-fwhq-w55p

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences