Vulnerability in Opensuse

CVE-2008-2388

Multiple off-by-one errors in opensuse-updater in openSUSE 10.2 have unspecified impact and attack vectors. NOTE: the vendor states that these "can be considered no security problem."

EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.

Affected products

Opensuse — versions 10.2
N/a — versions n/a

Weakness classification (CWE)

CWE-189

References

cve@mitre.org (vendor-advisory, x_refsource_SUSE)
cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)