Every CVE Search/ Get API key

CVE-2018-19636

Local root exploit via inclusion of attacker controlled shell script

7.3 High

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.32%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.3

Local root exploit via inclusion of attacker controlled shell script

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Record
CVE-2018-19636
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-306
Updated
2026-11-02
EUVDEUVD-2018-11321 7.3

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Record
EUVD-2018-11321
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-f264-4fj2-rjpf 7.8

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file...

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Record
GHSA-f264-4fj2-rjpf
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
NVD 7.3

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges

Record
CVE-2018-19636
CVSS 3.0
7.3 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-306, CWE-20
Updated
2026-11-02
OSVSUSE-SU-2019:1122-1 No score

Security update for hostinfo, supportutils

This update for hostinfo, supportutils fixes the following issues:

Security issues fixed for supportutils:

  • CVE-2018-19640: Fixed an issue where users could kill arbitrary processes (bsc#1118463).
  • CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#1118460).
  • CVE-2018-19639: Fixed a code execution if run with -v (bsc#1118462).
  • CVE-2018-19637: Fixed an issue where static temporary filename could allow overwriting of files (bsc#1117776).
  • CVE-2018-19636: Fixed a local root exploit via inclusion of attacker controlled shell script (bsc#1117751).

Other issues fixed for supportutils:

  • Fixed invalid exit code commands (bsc#1125666)
  • SUSE separation in supportconfig (bsc#1125623)
  • Clarified supportconfig(8) -x option (bsc#1115245)
  • supportconfig: 3.0.127
  • btrfs filesystem usage
  • List products.d
  • Dump lsof errors
  • Added ha commands for corosync
  • Dumped find errors in ib_info

Issues fixed in hostinfo:

  • Removed extra kernel install dates (bsc#1099498)
  • Resolved network bond issue (bsc#1054979)
Record
SUSE-SU-2019:1122-1
Updated
2026-11-02
OSVSUSE-SU-2019:13976-1 No score

Security update for supportutils

This update for supportutils fixes the following issues:

Security vulnerabilities fixed:

  • CVE-2018-19636: Local root exploit via inclusion of attacker controlled shell script (bsc#1117751)
  • CVE-2018-19640: Users can kill arbitrary processes (bsc#1118463)
  • CVE-2018-19638: User can overwrite arbitrary log files in support tar (bsc#1118460)
  • CVE-2018-19639: Code execution if run with -v (bsc#1118462)
Record
SUSE-SU-2019:13976-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
hostinfo
SUSE:OpenStack Cloud 7
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:OpenStack Cloud 7
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
supportutils
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
supportutils
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
Show 17 moreShow less
Affected packages
PackageAffectedFixed
hostinfo
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
hostinfo
SUSE:Enterprise Storage 4
From an advisory covering 5 CVEs
 before 1.0.1-19.5.1
1.0.1-19.5.1
supportutils
SUSE:Enterprise Storage 4
From an advisory covering 5 CVEs
 before 3.0-95.21.1
3.0-95.21.1
supportutils
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 4 CVEs
 before 1.20-122.9.1
1.20-122.9.1
supportutils
SUSE:Linux Enterprise Server 11 SP4
From an advisory covering 4 CVEs
 before 1.20-122.9.1
1.20-122.9.1
supportutils
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
From an advisory covering 4 CVEs
 before 1.20-122.9.1
1.20-122.9.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-19636 is a high vulnerability (CVSS 7.3) in Opensuse Supportutils, published March 5, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.

References

Show 15 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open