← CVE Intelligence

CVE-2021-46705

grub2-once uses fixed file name in /var/tmp PUBLISHED

Description (CNA)

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.

Affected (CNA)

Vendor / productVersions
SUSE / SUSE Linux Enterprise Server 15 SP4affected grub2 before 2.06-150400.7.1
SUSE / openSUSE Factoryaffected grub2 before 2.06-18.1

CWE

CWE-377

References

ADP enrichment

CVE

No English description supplied.