Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-56004 1 Opensuse 1 Open Buildservice 2026-07-29 10 Critical
A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services
CVE-2015-0796 1 Opensuse 1 Open Buildservice 2024-11-21 N/A
In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.