CVE-2018-20106

MEDIUM · CVSS 6.5 EPSS 1.02%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-15 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-20106

Severity

MEDIUM

CVSS

6.5

EPSS

1.02%

Original Filing — NVD Description

In yast2-printer up to and including version 4.0.2 the SMB printer settings don't escape characters in passwords properly. If a password with backticks or simliar characters is supplied this allows for executing code as root. This requires tricking root to enter such a password in yast.