PatchTheCVEsuper vulnerabilities and fixes
Recent CVEs affecting super, with upgrade or downgrade steps. 2 tracked.
super has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2014-04-30. Highest priority: CVE-2014-0470 (score 38/100).
- CVE-2014-0470 HIGH 7.2 DOWNGRADE super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which
- CVE-2011-2776 MEDIUM 4.4 DOWNGRADE Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary
FAQ
How do I fix super vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is super being exploited right now?
None of the tracked super CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which super CVE should I patch first?
CVE-2014-0470 currently ranks highest (38/100): super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which .