CVE-2024-22034

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Oct 16, 2024
Source updated: Oct 31, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Crafted projects can overwrite special files in the .osc config directory

Attackers could put the special files in .osc into the actual package sources (e.g. _apiurl). This allows the attacker to change the configuration of osc for the victim

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SUSE Linux Enterprise Desktop 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Desktop 15 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Desktop 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise High Performance Computing 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Module for Development Tools 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Module for Development Tools 15 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Module for Development Tools 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server for SAP Applications 15 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Desktop 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Desktop 15 SP6
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Desktop 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise High Performance Computing 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise High Performance Computing 15 SP6
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise High Performance Computing 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Module for Development Tools 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Module for Development Tools 15 SP6
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Module for Development Tools 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Server 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Server 15 SP6
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 15 SP6
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server for SAP Applications 15 SP6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

SUSE Linux Enterprise Server 12 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server 12 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server 12 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	0.183.0-15.18.1	Unavailable	None listed

SUSE Linux Enterprise Server for SAP Applications 12 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Server for SAP Applications 12 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Server for SAP Applications 12 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	0.183.0-15.18.1	Unavailable	None listed

SUSE Linux Enterprise Software Development Kit 12 SP5

Vendor: SUSE
Product: SUSE Linux Enterprise Software Development Kit 12 SP5
Platforms: Unknown
Default status: unaffected
Package: osc

SUSE Linux Enterprise Software Development Kit 12 SP5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	0.183.0-15.18.1	Unavailable	None listed

openSUSE Leap 15.5

Vendor: SUSE
Product: openSUSE Leap 15.5
Platforms: Unknown
Default status: unaffected
Package: osc

openSUSE Leap 15.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

openSUSE Leap 15.6

Vendor: SUSE
Product: openSUSE Leap 15.6
Platforms: Unknown
Default status: unaffected
Package: osc

openSUSE Leap 15.6 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-150400.10.6.1	Unavailable	None listed

openSUSE Tumbleweed

Vendor: SUSE
Product: openSUSE Tumbleweed
Platforms: Unknown
Default status: unaffected
Package: osc

openSUSE Tumbleweed · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
?	`affected`	custom	1.9.0-1.1	Unavailable	None listed