CVE:CVE-2022-31252
CNNVD:CNNVD-202209-1647
openSUSE是德国SUSE公司的一套基于Linux的自由操作系统与开源社区项目。
openSUSE 存在安全漏洞。攻击者利用该漏洞通过 chkstat() 绕过 SUSE 权限的访问限制，以读取或更改文件。
solution:Upgrade opensuse leap to a higher version than 15.3,15.4,and avoid the version 15.3,15.4; Upgrade opensuse leap_micro to a higher version than 5.2,and avoid the version 5.2; Upgrade suse linux_enterprise_server to a higher version than 12:sp5,and avoid the version 12:sp5