{"id":"CVE-2018-19640","aliases":["EUVD-2018-11325","GHSA-7g5j-9rpf-g2r7","SUSE-SU-2019:0480-1","SUSE-SU-2019:1122-1","SUSE-SU-2019:13976-1","openSUSE-SU-2019:0293-1","openSUSE-SU-2024:11415-1"],"status":"published","title":"Code execution if run with command line switch -v","description":"If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00301,"percentile":0.23016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-377"],"published":"2019-02-25T10:55:26Z","modified":"2026-06-17T01:49:38Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-5.7.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"hostinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1-19.5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0-95.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-122.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-122.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-122.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"supportutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.17-2.2"}]}],"bundled":4}],"products":[{"vendor":"opensuse","product":"supportutils"},{"vendor":"suse","product":"supportutils"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1118463","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00018.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-19640"},{"url":"https://github.com/advisories/GHSA-7g5j-9rpf-g2r7"},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190480-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1043311","tags":["report"]},{"url":"https://bugzilla.suse.com/1046681","tags":["report"]},{"url":"https://bugzilla.suse.com/1051797","tags":["report"]},{"url":"https://bugzilla.suse.com/1071545","tags":["report"]},{"url":"https://bugzilla.suse.com/1105849","tags":["report"]},{"url":"https://bugzilla.suse.com/1112461","tags":["report"]},{"url":"https://bugzilla.suse.com/1115245","tags":["report"]},{"url":"https://bugzilla.suse.com/1117776","tags":["report"]},{"url":"https://bugzilla.suse.com/1118460","tags":["report"]},{"url":"https://bugzilla.suse.com/1118462","tags":["report"]},{"url":"https://bugzilla.suse.com/1118463","tags":["report"]},{"url":"https://bugzilla.suse.com/1125609","tags":["report"]},{"url":"https://bugzilla.suse.com/1125666","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19638","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19640","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1054979","tags":["report"]},{"url":"https://bugzilla.suse.com/1099498","tags":["report"]},{"url":"https://bugzilla.suse.com/1117751","tags":["report"]},{"url":"https://bugzilla.suse.com/1125623","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19636","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201913976-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z5E2WUVXXXU3W3CLLARFPLLJ3RLQTXDJ/#Z5E2WUVXXXU3W3CLLARFPLLJ3RLQTXDJ","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-19640","title":"Code execution if run with command line switch -v","description":"If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.","status":"published","published":"2019-03-05T16:00:00Z","modified":"2024-09-17T01:45:58.729Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-377"],"updated_at":"2026-11-02T14:35:02.966615Z"}],"euvd":[{"id":"EUVD-2018-11325","description":"If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.","status":"published","published":"2019-03-05T16:00:00Z","modified":"2024-09-17T01:45:58Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:47.09844Z"}],"ghsa":[{"id":"GHSA-7g5j-9rpf-g2r7","title":"If the attacker manages to create files in the directory used to collect log files in...","description":"If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.","status":"published","published":"2022-05-14T01:05:25Z","modified":"2023-02-02T05:02:56Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:32.364862Z"}],"nvd":[{"id":"CVE-2018-19640","description":"If the attacker manages to create files in the directory used to collect log files in supportutils before version 3.1-5.7.1 (e.g. with CVE-2018-19638) he can kill arbitrary processes on the local machine.","status":"published","published":"2019-03-05T16:29:00.467Z","modified":"2026-06-17T01:49:38.76Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-377","CWE-20"],"updated_at":"2026-11-02T14:04:54.21788Z"}],"osv":[{"id":"openSUSE-SU-2019:0293-1","title":"Security update for supportutils","description":"This update for supportutils fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-19640: Fixed an issue where  users could kill arbitrary processes (bsc#1118463).\n- CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#1118460).\n- CVE-2018-19639: Fixed a code execution if run with -v (bsc#1118462).\n- CVE-2018-19637: Fixed an issue where static temporary filename could allow overwriting of files (bsc#1117776).\n\nOther issues fixed:\n\n- Fixed invalid exit code commands (bsc#1125666).\n- Included additional SUSE separation (bsc#1125609).\n- Merged added listing of locked packes by zypper.\n- Exclude pam.txt per GDPR by default (bsc#1112461).\t  \n- Clarified -x functionality in supportconfig(8) (bsc#1115245).\t  \n- udev service and provide the whole journal content in supportconfig (bsc#1051797).\n- supportconfig collects tuned profile settings (bsc#1071545).\n- sfdisk -d no disk device specified (bsc#1043311).\n- Added vulnerabilites status check in basic-health.txt (bsc#1105849).\n- Added only sched_domain from cpu0.\n- Blacklist sched_domain from proc.txt (bsc#1046681).\n- Added firewall-cmd info.\n- Add ls -lA --time-style=long-iso /etc/products.d/\n- Dump lsof errors.\n- Added corosync status to ha_info.\n- Dump find errors in ib_info.\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T11:09:34Z","modified":"2026-02-04T03:10:48.323103Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11415-1","title":"supportutils-3.1.17-2.2 on GA media","description":"These are all security issues fixed in the supportutils-3.1.17-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:19:19.434367Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0480-1","title":"Security update for supportutils","description":"This update for supportutils fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-19640: Fixed an issue where  users could kill arbitrary processes (bsc#1118463).\n- CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#1118460).\n- CVE-2018-19639: Fixed a code execution if run with -v (bsc#1118462).\n- CVE-2018-19637: Fixed an issue where static temporary filename could allow overwriting of files (bsc#1117776).\n\nOther issues fixed:\n\n- Fixed invalid exit code commands (bsc#1125666).\n- Included additional SUSE separation (bsc#1125609).\n- Merged added listing of locked packes by zypper.\n- Exclude pam.txt per GDPR by default (bsc#1112461).\t  \n- Clarified -x functionality in supportconfig(8) (bsc#1115245).\t  \n- udev service and provide the whole journal content in supportconfig (bsc#1051797).\n- supportconfig collects tuned profile settings (bsc#1071545).\n- sfdisk -d no disk device specified (bsc#1043311).\n- Added vulnerabilites status check in basic-health.txt (bsc#1105849).\n- Added only sched_domain from cpu0.\n- Blacklist sched_domain from proc.txt (bsc#1046681).\n- Added firewall-cmd info.\n- Add ls -lA --time-style=long-iso /etc/products.d/\n- Dump lsof errors.\n- Added corosync status to ha_info.\n- Dump find errors in ib_info.\n","status":"published","published":"2019-02-25T10:55:26Z","modified":"2026-02-04T04:08:32.524223Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:1122-1","title":"Security update for hostinfo, supportutils","description":"This update for hostinfo, supportutils fixes the following issues:\n\t  \nSecurity issues fixed for supportutils:\n\n- CVE-2018-19640: Fixed an issue where  users could kill arbitrary processes (bsc#1118463).\n- CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files (bsc#1118460).\n- CVE-2018-19639: Fixed a code execution if run with -v (bsc#1118462).\n- CVE-2018-19637: Fixed an issue where static temporary filename could allow overwriting of files (bsc#1117776).\n- CVE-2018-19636: Fixed a local root exploit via inclusion of attacker controlled shell script (bsc#1117751).\n\nOther issues fixed for supportutils:\n\n- Fixed invalid exit code commands (bsc#1125666)\n- SUSE separation in supportconfig (bsc#1125623)\n- Clarified supportconfig(8) -x option (bsc#1115245)\n- supportconfig: 3.0.127\n- btrfs filesystem usage\n- List products.d\n- Dump lsof errors\n- Added ha commands for corosync\n- Dumped find errors in ib_info\n\nIssues fixed in hostinfo:\n- Removed extra kernel install dates (bsc#1099498)\n- Resolved network bond issue (bsc#1054979)\n","status":"published","published":"2019-04-30T16:04:21Z","modified":"2026-02-04T02:26:12.378116Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:13976-1","title":"Security update for supportutils","description":"This update for supportutils fixes the following issues:\n\nSecurity vulnerabilities fixed:\n\n- CVE-2018-19636: Local root exploit via inclusion of attacker controlled shell script (bsc#1117751)\n- CVE-2018-19640: Users can kill arbitrary processes (bsc#1118463)\n- CVE-2018-19638: User can overwrite arbitrary log files in support tar (bsc#1118460)\n- CVE-2018-19639: Code execution if run with -v (bsc#1118462)\n","status":"published","published":"2019-03-12T17:40:58Z","modified":"2026-02-04T02:45:14.474395Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}