High severity · published Nov 13, 2024
CVE-2024-49506
Fixed temporary file path in aeon-checks allows fixing of disk encryption key
7.3
CVSS
0.1%
EPSS
No
On KEV
Description
Insecure creation of temporary files allows local users on systems with non-default configurations to cause denial of service or set the encryption key for a filesystem
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TU
Tumbleweed · openSUSE
before 1.0.2; before 1.2.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-49506
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-49506
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-49506
More from Tumbleweed
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
8.5
CVE-2025-46810
A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate to root. This issue affects Tumbleweed:…
7.8
CVE-2023-32183
Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the hacluster to escalate to root This issue affects openSUSE…
7.8
CVE-2022-31250
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root
7.8
CVE-2020-8026
A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers with control of the new…