CVE-2011-2225
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows...
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
- Record
CVE-2011-2225- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
- Record
CVE-2011-2225- Updated
- 2026-11-02
EUVDEUVD-2011-2214 No score
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
- Record
EUVD-2011-2214- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hr33-mrq4-qq9h No score
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows...
Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.
- Record
GHSA-hr33-mrq4-qq9h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2225 is a high vulnerability (CVSS 9.3) in Marcus Schafer Kiwi, published August 23, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. No source names a fixed version.
References
support.novell.com/security/cve/CVE-2011-2225.html
securityfocus.com/bid/49236
exchange.xforce.ibmcloud.com/vulnerabilities/69277
lists.opensuse.org/opensuse-security-announce/2011-08/msg00013.html
bugzilla.novell.com/show_bug.cgi?id=709572
nvd.nist.gov/vuln/detail/CVE-2011-2225
github.com/advisories/GHSA-hr33-mrq4-qq9h