Oval Definition:oval:org.opensuse.security:def:20145220
Revision Date:2022-05-20Version:1
Title:CVE-2014-5220
Description:

The mdcheck script of the mdadm package for openSUSE 13.2 prior to version 3.3.1-5.14.1 does not properly sanitize device names, which allows local attackers to execute arbitrary commands as root.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-5220
Mitre CVE-2014-5220
SUSE CVE-2014-5220
openSUSE-SU-2015:0308-1
Platform(s):openSUSE 13.2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 12
Product(s):
Definition Synopsis
  • openSUSE 13.2 is installed
  • AND mdadm-3.3.1-5.14.1 is installed
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • OR SUSE Linux Enterprise Server 11 SP3 is installed
  • AND mdadm is not affected
  • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Desktop 12 is installed
  • OR SUSE Linux Enterprise Server 12 is installed
  • AND mdadm is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND mdadm is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND mdadm is not affected
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND mdadm is not affected
  • BACK