CVE-2018-19639

MEDIUM · CVSS 6.7 EPSS 0.50%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-19639

Severity

MEDIUM

CVSS

6.7

EPSS

0.50%

Original NVD Description

If supportutils before version 3.1-5.7.1 is run with -v to perform rpm verification and the attacker manages to manipulate the rpm listing (e.g. with CVE-2018-19638) he can execute arbitrary commands as root.