Oval Definition:oval:org.opensuse.security:def:201814056
Revision Date:2022-06-30Version:1
Title:CVE-2018-14056
Description:

ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2018-14056
openSUSE-SU-2018:2228-1
openSUSE-SU-2018:2231-1
Mitre CVE-2018-14056
SUSE CVE-2018-14056
openSUSE-SU-2018:2228-1
openSUSE-SU-2018:2231-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 42.3
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12 SP2
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Package Hub for SUSE Linux Enterprise 12 SP2
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • znc-1.7.1-lp150.2.6 is installed
  • AND znc is signed with openSUSE key
  • OR
  • znc-devel-1.7.1-lp150.2.6 is installed
  • AND znc-devel is signed with openSUSE key
  • OR
  • znc-lang-1.7.1-lp150.2.6 is installed
  • AND znc-lang is signed with openSUSE key
  • OR
  • znc-perl-1.7.1-lp150.2.6 is installed
  • AND znc-perl is signed with openSUSE key
  • OR
  • znc-python3-1.7.1-lp150.2.6 is installed
  • AND znc-python3 is signed with openSUSE key
  • OR
  • znc-tcl-1.7.1-lp150.2.6 is installed
  • AND znc-tcl is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 42.3 is installed
  • AND Package Information
  • znc-1.7.1-20.3 is installed
  • AND znc is signed with openSUSE key
  • OR
  • znc-devel-1.7.1-20.3 is installed
  • AND znc-devel is signed with openSUSE key
  • OR
  • znc-lang-1.7.1-20.3 is installed
  • AND znc-lang is signed with openSUSE key
  • OR
  • znc-perl-1.7.1-20.3 is installed
  • AND znc-perl is signed with openSUSE key
  • OR
  • znc-python3-1.7.1-20.3 is installed
  • AND znc-python3 is signed with openSUSE key
  • OR
  • znc-tcl-1.7.1-20.3 is installed
  • AND znc-tcl is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 SP2 is installed
  • AND Package Information
  • znc-1.7.1-2 is installed
  • OR znc-devel-1.7.1-2 is installed
  • OR znc-lang-1.7.1-2 is installed
  • OR znc-perl-1.7.1-2 is installed
  • OR znc-python3-1.7.1-2 is installed
  • OR znc-tcl-1.7.1-2 is installed
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • znc-1.8.2-1.11 is installed
  • OR znc-devel-1.8.2-1.11 is installed
  • OR znc-lang-1.8.2-1.11 is installed
  • OR znc-perl-1.8.2-1.11 is installed
  • OR znc-python3-1.8.2-1.11 is installed
  • OR znc-tcl-1.8.2-1.11 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 SP2 is installed
  • AND Package Information
  • znc-1.7.1-2.1 is installed
  • OR znc-devel-1.7.1-2.1 is installed
  • OR znc-lang-1.7.1-2.1 is installed
  • OR znc-perl-1.7.1-2.1 is installed
  • OR znc-python3-1.7.1-2.1 is installed
  • OR znc-tcl-1.7.1-2.1 is installed
  • BACK