High severity7.8NVD Advisory· Published Aug 29, 2018· Updated Jun 17, 2026

CVE-2018-15912

Description

An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Manjaro/Manjaro Systeminferred2 versions
= 20180716-1+ 1 more
- (no CPE)range: = 20180716-1
- (no CPE)range: =20180716-1

Patches

Vulnerability mechanics

References

gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8anvdPatchThird Party Advisory
lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.htmlnvdExploitMailing ListVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000