CVE
CVE-2018-15912
An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system.
- Severity
- HIGH
- CVSS
- 7.8
- Published
- Modified
Linked Releases
| Distribution | Release | Status | Evidence |
|---|---|---|---|
| Manjaro | 26.1.0-pre x86_64 xfce | unknown | source |
| Manjaro | 26.1.0-pre x86_64 gnome | unknown | source |
| Manjaro | 26.1.0-pre x86_64 kde minimal | unknown | source |
| Manjaro | 26.1.0-pre x86_64 kde | unknown | source |
| Manjaro | 26.1.0-pre x86_64 gnome minimal | unknown | source |
| Manjaro | 26.1.0-pre x86_64 xfce minimal | unknown | source |
| Manjaro | 26.1.0 | unknown | source |
| Manjaro | 26.1.0 x86_64 kde minimal | unknown | source |
| Manjaro | 26.1.0 x86_64 kde | unknown | source |
| Manjaro | 26.1.0 x86_64 gnome | unknown | source |
| Manjaro | 26.1.0 x86_64 gnome minimal | unknown | source |
| Manjaro | 26.1.0 x86_64 xfce | unknown | source |
| Manjaro | 26.1.0 x86_64 xfce minimal | unknown | source |
| Manjaro | 26.1.1 | unknown | source |
| Manjaro | 26.1.1 x86_64 xfce | unknown | source |
| Manjaro | 26.1.1 x86_64 gnome | unknown | source |
| Manjaro | 26.1.1 x86_64 kde | unknown | source |
| Manjaro | 26.1.1 x86_64 kde minimal | unknown | source |
| Manjaro | 26.1.1 x86_64 gnome minimal | unknown | source |
| Manjaro | 26.1.1 x86_64 xfce minimal | unknown | source |