CVE-2023-32182

Summary

CVE-2023-32182 is a newly identified vulnerability affecting the postfix package in SUSE Linux Enterprise Desktop 15 SP5, SUSE Linux Enterprise High Performance Computing 15 SP5, and openSUSE Leap 15.5. This issue involves improper link resolution before file access, also known as a 'Link Following' vulnerability. Hackers can exploit this vulnerability to gain unauthorized access to sensitive files or execute malicious code. Affected versions include SUSE Linux Enterprise Desktop 15 SP5 before 3.7.3-150500.3.5.1, SUSE Linux Enterprise High Performance Computing 15 SP5 before 3.7.3-150500.3.5.1, and openSUSE Leap 15.5 before 3.7.3-150500.3.5.1. It is highly recommended that users update their systems to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.