| Package | Affected versions | Patched versions |
|---|---|---|
| backports sle | = 15.0 | |
| sqliteodbc | = 0.9996 |
SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free