| Package | Affected versions | Patched versions |
|---|---|---|
| yast2-printer | ≤ 4.0.2 |
In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free