CVE-2019-19519
Published
CVSS v3
7.8
HIGH
CVSS v2
4.6
MEDIUM
Affected
1
PROJECT
Description
In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c.
Read-only git conversion of OpenBSD's official CVS src repository. Pull requests not accepted - send diffs to the tech@ mailing list.